EUVD-2026-85366

Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get'. A remote attacker with a valid session token could read any file that the target user can access. This access includes the...

EUVD-2026-85191

The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy before preferring client-supplied forwarding headers over the connecting address, and it uses that value both to enforce its per-visitor voting limit and to record who submitted an entry...

CVE-2026-87070

The Forminator Forms WordPress plugin (versions prior to 1.57.2.1 ) is vulnerable to an authentication bypass due to insufficient validation of trusted proxies . The plugin prefers client-supplied forwarding headers over the actual connecting address to enforce per-visitor voting limits and to re...

EUVD-2026-84983

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...

CVE-2026-92929

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...

CVE-2026-84474: Reliance on Untrusted Inputs in a Security Decision

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret hostconfigkey is exposed to users holding only the read-level viewjobtemplate permission -- both in the job template API representation and in the activity stream -- and the...

CVE-2022-24181

CVE-2022-24181 y CVE-2022-26616. probablemente son iguales Open-journal-system-Vulnerabilidad XSS mediante inyección de Host Header y robo del token de restablecimiento de contraseña de otro usuario Pasos para reproducir: 1. Ir a este sitio: https://who's-using-ojs-software.com 2. Capturar esta...

CVE-2026-92929

The OpenEye Apex Network Video Recorder (NVR) firmware, specifically version 3.2.9.376 , is vulnerable to an authentication bypass. The software incorrectly trusts the X-Forwarded-For header provided by clients to determine the request source address. This design flaw, present since at least firm...

CVE-2026-92929

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...

CVE-2015-3224

Exploit de la Consola Web de Ruby on Rails CVE-2015-3224 Este repositorio contiene un script en Python para explotar una vulnerabilidad de omisión de la lista blanca de IP en la consola web de desarrollo de Ruby on Rails 4.0.x y 4.1.x. El script permite la ejecución remota de código en servidores...

CVE-2026-37604

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

CVE-2026-55584

CVE-2026-55584 - Bypass de la lista de permitidos de IP de phpSysInfo CWE-290, CVSS 7.5 Alta, phpSysInfo = 3.4.5 Refs: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED resuelve la IP del cliente a partir de las cabeceras controladas por el atacante X-Forwarded-For luego Client-IP antes de recurrir a...

CVE-2026-37604

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

CVE-2023-4549

CVE ID : CVE-2023-4549 Vulnerability Type : Cross-Site Scripting Description : The DoLogin Security plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 3.6 due to insufficient input sanitization and output escaping...

CVE-2019-19633

CVE-2019-19633 lib/G/functions.php en Chevereto 1.0.0 hasta 1.1.4 Free, y hasta 3.13.5 Core, permite a un atacante realizar ataques de fuerza bruta sin activar el mecanismo de protección implementado, manipulando la cabecera X-Forwarded-For en la solicitud. La IP en la cabecera debe cambiarse cad...

CVE-2020-35590

Exploit Information Exploit Title: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Login Limit Bypass CVE: CVE-2020-35590 Date: 2020-06-09 Exploit Author: N4nj0 Software Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Tested on: WordPress 5.4.1, 5.4.2...

CVE-2026-85751

Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXYAUTHWHITELIST configured but REALIPHEADER unset trusted a client-controlled X-Forwarded-By header for header-based proxy authentication. The...

CVE-2026-85751

Mailu is a mail server distributed as a set of Docker images. In deployments where PROXY_AUTH_WHITELIST was configured but REAL_IP_HEADER was unset (Mailu 2.0 through 2024.06.54; helm-charts prior to 2.7.3), nginx trusted a client-controlled X-Forwarded-By header for proxy authentication. The pro...

CVE-2026-85751 Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXYAUTHWHITELIST configured but REALIPHEADER unset trusted a client-controlled X-Forwarded-By header for header-based proxy authentication. The...

CVE-2026-85751 Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXYAUTHWHITELIST configured but REALIPHEADER unset trusted a client-controlled X-Forwarded-By header for header-based proxy authentication. The...