CVE-2026-102161

An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...

EUVD-2026-93958

An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...

EUVD-2022-29473

Malicious code in bioql PyPI...

CVE-2024-54450

An issue exists in Kurmi Provisioning Suite 7.9.0.33 where the application records an IP address from the X-Forwarded-For header during authentication rather than the actual source IP. This allows for the recording of a possibly forged IP address , which can subsequently be displayed in the My Ac...

CVE-2022-24594

CVE-2022-24594 affects waline 1.6.1. An attacker can submit messages with a forged IP address by manipulating the X-Forwarded-For header, enabling IP spoofing. Multiple connected sources (Red Hat advisory, Veracode note) indicate this can bypass IP-related checks such as IP frequency limits, affe...

CVE-2022-24594

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address...

CVE-2022-24594: Missing Authorization

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address...

PT-2022-16744

Name of the Vulnerable Software and Affected Versions waline version 1.6.1 Description The issue allows an attacker to submit messages using the X-Forwarded-For header to forge any IP address. Recommendations For waline version 1.6.1, consider restricting the use of the X-Forwarded-For header unt...

Apache HTTP Server 'mod_remoteip.c' IP Address Forgery Vulnerability

Apache HTTP Server is a popular WEB service program. Apache HTTP Server 'modremoteip.c' has an IP address forgery vulnerability that allows attackers to exploit the vulnerability to bypass security restrictions and conduct attacks such as spoofing...