Caddy Defender trusted proxy client IP bypass

Impact Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer connected to Caddy. In deployments where Caddy is behind a trusted proxy, CDN, or load balancer, the immediate peer is usually the proxy, not the original...

EUVD-2006-7053

Malware in sbrugna...

EUVD-2009-3303

Malware in sbrugna...

Huawei Desktop Cloud Windows Virtual Desktop Agent Service hdpCommunication application suffers from denial of service vulnerability (CNVD-2020-27176)

Founded in 1987, Huawei Technologies Co. Ltd. is a global provider of ICT information and communications infrastructure and smart terminals. A denial-of-service vulnerability exists in the hdpCommunication application of the Windows virtual desktop proxy service of Huawei Desktop Cloud, where an...

CVE-2014-1401

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 search parameter to mod/content/content.php or 2 CLIENTIP, 3 XFORWARDEDFOR, 4 XFORWARDED, 5 FORWARDEDFOR, or 6 FORWARDED HTTP header to index.php...

BlueCMS - PHP local portal system 0day large collection of-vulnerability warning-the black bar safety net

Bluecms is from a company tutorial to see the cms, and then thought, since there, used to do tutorials, I'll dig this set of cms vulnerabilities, I did not dig deep end, also failed to adhere to the code to see finished. It has been found that a lot of problems. Can actually get a shell on it. !...

CVE-2009-3321

SQL injection vulnerability in SaphpLesson 4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENTIP HTTP header...

Sql injection

SQL injection vulnerability in SaphpLesson 4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENTIP HTTP header...

CVE-2009-3321

SQL injection vulnerability in SaphpLesson 4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENTIP HTTP header...

MyBulletinBoard (MyBB) <= 1.2.2 (CLIENT-IP) SQL Injection Exploit

No description provided by source. !/usr/bin/perl LOGO Mybb = 1.2.2 Remote SQL Injecton Exploit v.2.0 uused: SQL CLIENTIP vulnerability !need: Mysql = 4.1 wwork: blind sql-inj ggoogle: Powered By MyBB coded by Elekt antichat.ru Coments Описание: Работа эксплойта...

CVE-2006-7071

SQL injection vulnerability in classes/classsession.php in Invision Power Board IPB 2.1 up to 2.1.6 allows remote attackers to execute arbitrary SQL commands via the CLIENTIP parameter...