3370 matches found
CVE-2011-3624: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted...
Radancy: 'X-Forwarded-Host' key used in input without sanitation - possible cache poisoning
Domain and URL: maximum.nl Summary: The HTTP 'X-Forwarded-Host' is dynamically used in the application without sanitization, allowing an attacker control of the input key. This can allow for self-XSS, or when a CDN or caching service is deployed, risk the CDN caching the request and serving the...
Snapchat: Bypass Rate Limits on app.snapchat.com API Endpoint via X-Forwarded-For Header
An attacker can bypass the rate limiting in place at app.snapchat.com by setting the X-Forwarded-For header to 127.0.0.1 in POST requests to app.snapchat.com/storieseverywhere/downloadsms and several other endpoints. This bypasses the controls in place for this endpoint, which appears to have...
Moneybird: Bypass password reset rate limit protection at moneybird.com/passwords
Attacker found a way to completely bypass our rate limit protection, allowing for other types of attacks. This involved changing the value of the X-Forwarded-For header. Attacker never got a 429 response from our servers when the value for each request is different. Injecting X-Forwarded-For :...
PT-2019-7425
Name of the Vulnerable Software and Affected Versions wti-like-post plugin versions prior to 1.4.3 Description The issue concerns SQL injection via the HTTP CLIENT IP, HTTP X FORWARDED FOR, HTTP X FORWARDED, HTTP FORWARDED FOR, or HTTP FORWARDED variable in the WtiLikePostProcessVote function...
CVE-2019-17240
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers...
CVE-2019-17213
The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...
CVE-2019-17213
The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...
Design/Logic Flaw
The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...
CVE-2019-17213
The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...
CVE-2019-17213
CVE-2019-17213 affects the WebARX plugin for WordPress (version 1.3.0). The connected records confirm an unauthenticated stored cross-site scripting (XSS) vulnerability that can be triggered via the URI or the X-Forwarded-For HTTP header. The root cause is an XSS flaw in how input in the request ...
PT-2019-15006
Name of the Vulnerable Software and Affected Versions WebARX plugin version 1.3.0 Description The issue allows for unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header. Recommendations For version 1.3.0, update to a newer version that contains a fix for this issue...
CVE-2019-17240: Improper Restriction of Excessive Authentication Attempts
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers...
PT-2019-15027
Name of the Vulnerable Software and Affected Versions Bludit versions 3.2.9 through 3.9.2 Description The issue allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers. This can be exploited by sending requests with...
CVE-2019-17213: Improper Neutralization of Input During Web Page Generation
The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...
PT-2020-14209
Name of the Vulnerable Software and Affected Versions Traefik versions prior to 1.7.26 Traefik versions prior to 2.2.8 Traefik versions prior to 2.3.0-rc3 Description The issue concerns Traefik's handling of the X-Forwarded-Prefix header, where the Traefik API dashboard component does not validat...
New Relic: Host Header Injection
Reproduction 1- open reset link https://login.newrelic.com/passwords/forgot 2- Enter the victim's email address and click Reset and Email Password 3- Intercept the HTTP request in Burp Suite & add X-Forwarded Host Header and write attacker.com/.newrelic.com link will be like...
CVE-2016-10990
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header...