4829 matches found
CLEANSTART-2026-BJ83966 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-EE28153 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
Security Bulletin:ip-address IPv4-mapped/NAT64 IPv6 Address SSRF Vulnerability Fix in 10.2.1
Summary ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known...
Western Digital MyCloud NAS - Authentication Bypass
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...
ip-obfuscation
IP 混淆器 一个用于生成混淆 IP 地址和 URL 的安全测试工具包。适用于渗透测试、安全研究、钓鱼意识培训以及测试 URL 解析器/过滤器。 概述 该工具包提供两种界面： ipobfuscator.html - 基于 Web 的图形界面，用于交互式使用 ipobfuscator.py - 命令行工具，用于脚本编写和自动化 两种工具生成相同的混淆技术，包括： DWORD/整数格式（十进制、十六进制、八进制） 点分表示法变体（十六进制、八进制、混合进制） IPv6 映射地址 URL 权威部分技巧（使用 @ 的伪造域名） B/C 类简写表示法 溢出技术 URL 编码变体 Web...
CVE-2026-102161
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
EUVD-2026-93958
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
CVE-2023-4281
CVE编号: CVE-2023-4281 漏洞类型: IP地址欺骗 描述: Activity Log 插件从潜在不可信的头部中获取客户端 IP 地址，攻击者可操纵其值。这可能被用于隐藏恶意流量的来源。 复现步骤: Run the following code in the web browser and note on the backend that the IP address has been faked. await fetch"/wp-login.php", "headers": "content-type":...
Astra Linux – Vulnerability in Node.js
A OS command injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check. This vulnerability can be easily exploited, as the IsIPAddress function does not properly check whether an IP address is invalid before making DBS requests, thereby...
Astra Linux – Vulnerability in python-ipaddress
The Lib/ipaddress.py module in Python up to version 3.8.3 incorrectly calculates hash values for the IPv4Interface and IPv6Interface classes. This may allow a remote attacker to cause a denial of service if an application relies on the performance of a dictionary containing IPv4Interface or...
CVE-2023-4279
CVE ID : CVE-2023-4279 漏洞类型 : IP 地址欺骗 描述 : 该插件从可能不可信的请求头中获取客户端 IP 地址，攻击者可以操纵该值，从而隐藏恶意流量的来源。 复现步骤 : 1. 在用户活动日志 设置中，启用“记录用户的 IP 地址”选项并保存设置。 2. 在浏览器中运行以下代码，并注意后端显示的 IP 地址已被伪造。 await fetch"/wp-login.php", "headers": "content-type": "application/x-www-form-urlencoded", "Client-Ip": "8.8.8.8", , "body"...
K000163541: ip-address library vulnerability CVE-2026-42338
Security Advisory Description ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group and Address6.link do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and...
PoC-CVE-2000-0649
PoC-CVE-2000-0649 一个用于为 CVE-2000-0649 创建 PoC 的小工具。 用法 此脚本用于验证服务器是否存在 CVE-2000-0649 漏洞。请注意尝试 HTTP、HTTPS 以及不同的路径。根据我的经验，信息泄露大多发生在通过 HTTP 连接并使用默认路径 '/' 或 '/images' 时。 你需要提供主机/IP 地址和端口。默认情况下路径设置为 '/'。你也可以选择性地指定以 '/' 开头的路径。 $ python3 cve-2000-0649.py -host hostname -port port -path path This script...
TekDefense-Automater
TekDefense-Automater 版本：0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html Automater 是我最初创建的一个工具，用于自动化 IP 地址的 OSINT 分析。它迅速成长为一个能够分析 IP 地址、URL 和哈希值的工具。遗憾的是，这是我的第一个 Python 项目，我犯了很多错误，随着项目的增长，它变得非常难以维护。...
CVE-2022-4539
使用注意事项： 适应性： 您可以轻松修改有效载荷、IP 生成逻辑和代理，以匹配不同的场景或环境。 道德使用： 确保在测试任何系统前已获得明确授权。 可扩展性： 本代码设计为可扩展且适应性强，既适用于小规模测试，也适用于更复杂的大型评估。 WordPress 的 Web 应用程序防火墙插件在 2.1.2 及之前版本中存在 IP 地址欺骗漏洞。这是因为在请求日志记录和登录限制中，获取 IP 地址信息的位置限制不足。攻击者可以提供带有不同 IP 地址的 X-Forwarded-For 标头，该地址将被记录，并可用来绕过可能已阻止某个 IP 地址或国家/地区登录的设置。...
CLSA-2026-1791028139 TuxCare security update for ip-address (1 CVE)
TuxCare rebuilt ip-address to address 1 CVE. Fixed in 6.4.0-tuxcare.6...
active_c2_ioc_public
+OPTIONS: ^: +TITLE: 活跃 C2 IOCs 注意 请谨慎对待每条记录中的 firstseen/lastseen 日期。不要仅凭一个 IP 地址就下判断。...
CLSA-2026-1790937671 TuxCare security update for ip-address (1 CVE)
TuxCare rebuilt ip-address to address 1 CVE. Fixed in 7.1.0-tuxcare.5...