4829 matches found
CLEANSTART-2026-BJ83966 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-EE28153 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
Security Bulletin:ip-address IPv4-mapped/NAT64 IPv6 Address SSRF Vulnerability Fix in 10.2.1
Summary ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known...
Western Digital MyCloud NAS - Authentication Bypass
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...
ip-obfuscation
IP Obfuscator A security testing toolkit for generating obfuscated IP addresses and URLs. Useful for penetration testing, security research, phishing awareness training, and testing URL parsers/filters. Overview This toolkit provides two interfaces: ipobfuscator.html - Web-based GUI for...
CVE-2026-102161
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
EUVD-2026-93958
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
CVE-2023-4281
CVE ID: CVE-2023-4281 Vulnerability Type: IP Address Spoofing Description: The Activity Log plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. Steps to reproduce: Run the...
Astra Linux – Vulnerability in Node.js
A OS command injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check. This vulnerability can be easily exploited, as the IsIPAddress function does not properly check whether an IP address is invalid before making DBS requests, thereby...
Astra Linux – Vulnerability in python-ipaddress
The Lib/ipaddress.py module in Python up to version 3.8.3 incorrectly calculates hash values for the IPv4Interface and IPv6Interface classes. This may allow a remote attacker to cause a denial of service if an application relies on the performance of a dictionary containing IPv4Interface or...
CVE-2023-4279
CVE ID : CVE-2023-4279 Vulnerability Type : IP Address Spoofing Description : This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. Steps to reproduce : 1. In User...
K000163541: ip-address library vulnerability CVE-2026-42338
Security Advisory Description ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group and Address6.link do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and...
PoC-CVE-2000-0649
PoC-CVE-2000-0649 A small tool to create a PoC for CVE-2000-0649. Usage This script verifies if the server is vulnerable for CVE-2000-0649. Keep in mind to play with HTTP, HTTPS and different paths. In my experience, the disclosure is mostly happening when connecting over HTTP and using the defau...
TekDefense-Automater
TekDefense-Automater Version: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html Automater is a tool that I originally created to automate the OSINT analysis of IP addresses. It quickly grew and became a tool to do...
CVE-2022-4539
Usage Considerations: Adaptability: You can easily modify the payloads, IP generation logic, and proxies to match different scenarios or environments. Ethical Use: Ensure you have explicit permission before testing any system with this code. Scalability: This code is designed to be scalable and...
CLSA-2026-1791028139 TuxCare security update for ip-address (1 CVE)
TuxCare rebuilt ip-address to address 1 CVE. Fixed in 6.4.0-tuxcare.6...
active_c2_ioc_public
+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...
CLSA-2026-1790937671 TuxCare security update for ip-address (1 CVE)
TuxCare rebuilt ip-address to address 1 CVE. Fixed in 7.1.0-tuxcare.5...