EUVD-2022-29473

Malicious code in bioql PyPI...

CVE-2024-54450

CVE-2024-54450 affects Kurmi Provisioning Suite 7.9.0.33. During authentication, if an X-Forwarded-For header is present, the application records the header-provided IP (potentially forged) instead of the real IP, and may display this fake IP in the user’s My Account popup. The issue is classifie...

CVE-2022-24594

CVE-2022-24594 affects waline 1.6.1. An attacker can submit messages with a forged IP address by manipulating the X-Forwarded-For header, enabling IP spoofing. Multiple connected sources (Red Hat advisory, Veracode note) indicate this can bypass IP-related checks such as IP frequency limits, affe...

Apache HTTP Server 'mod_remoteip.c' IP Address Forgery Vulnerability

Apache HTTP Server is a popular WEB service program. Apache HTTP Server 'modremoteip.c' has an IP address forgery vulnerability that allows attackers to exploit the vulnerability to bypass security restrictions and conduct attacks such as spoofing...