CVE-2021-47156

The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-47155

The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-47156

The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-47156

CVE-2021-47156 affects the Perl module Net::IPAddress::Util (before 5.000). The flaw arises from not properly handling extraneous zero characters in IP address strings, which can allow bypassing IP‑address based access control. Impact is access control bypass (no general exploitation details prov...

CVE-2021-47154

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-47155

CVE-2021-47155 affects the Net::IPv4Addr Perl module (version 0.10). The vulnerability stems from improper handling of extraneous leading zeros in IP address strings, which can allow bypass of IP-based access controls in some scenarios. The provided connected documents confirm this issue across m...

CVE-2021-47155

The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

Net-IPAddress-Util Security Vulnerability

Net-IPAddress-Util is a software package. A security vulnerability exists in Net-IPAddress-Util versions prior to 5.000 that stems from not properly filtering IP address strings beginning with 0, which allows an attacker to bypass IP address-based access control...

CVE-2021-47155

The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-47154

CVE-2021-47154 affects Net::CIDR::Lite (Perl) prior to 0.22, where extraneous leading zeros at the start of IP CIDR strings can bypass IP-based access controls. Root cause: mis-handling of leading zero characters; Note: Net::CIDR::Set versions 0.10–0.13 report a related issue and reference Net::C...

PT-2024-4391

Name of the Vulnerable Software and Affected Versions Net::CIDR::Lite versions prior to 0.22 Description The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string. This can allow attackers to bypass access control based on IP addresses in...

PT-2024-11204 · Unknown · Net::Ipaddress::Util

Name of the Vulnerable Software and Affected Versions: Net::IPAddress::Util versions prior to 5.000 Description: The issue arises from the Net::IPAddress::Util module not properly handling extraneous zero characters in IP address strings. This can lead to attackers bypassing access control based ...

PT-2024-2663 · Libcurl +2 · Libcurl +2

Name of the Vulnerable Software and Affected Versions: libcurl affected versions not specified Description: The issue is related to the implementation of TLS protocols in libcurl, where the server certificate is not checked when connecting to a host specified as an IP address, when built to use...

SolarView Compact 6.00 - Command Injection

Exploit Title: SolarView Compact 6.00 - Command Injection - Shodan Dork: http.html:"solarview compact" - Exploit Author: ByteHunter - Email: [email protected] - Version: 6.00 - Tested on: 6.00 - CVE : CVE-2023-23333 import argparse import requests def vulncheckipaddress, port: url =...

TP-Link TL-WR740N Buffer Overflow / Denial Of Service

Exploit Title: TP-Link TL-WR740N - Buffer Overflow 'DOS' Date: 8/12/2023 Exploit Author: Anish Feroz ZEROXINN Vendor Homepage: http://www.tp-link.com Version: TP-Link TL-WR740n 3.12.11 Build 110915 Rel.40896n Tested on: TP-Link TL-WR740N Description: There exist a buffer overflow vulnerability in...

Netentsec NS-ASG Application Security Gateway SQL Injection Vulnerability

Netentsec NS-ASG Application Security Gateway is an application security gateway from China Netentsec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3. The vulnerability originates from some unknown functions in /protocol/index.php, which can lead...

BIT-GITLAB-2022-1935

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Trigger Token to misuse it from any location even when I...

BIT-GITLAB-2022-1936

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Deploy Token to misuse it from any location even when IP...

BIT-GITLAB-2022-3286

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token...

BIT-MEDIAWIKI-2020-27621

The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific user's IP address. Instead, for various actions, it would report the IP address of an internal Wikimedia Foundation server by omitting X-Forwarded-For data. This resulted in an...