CVE-2020-8984

lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header...

Design/Logic Flaw

lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header...

PT-2022-8588 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.8.2 Moodle versions prior to 3.7.5 Moodle versions prior to 3.6.9 Moodle versions prior to 3.5.11 Description: The issue allows X-Forwarded-For headers to be used to spoof a user's IP, bypassing remote address check...

HomeAutomation 3.3.2 - Authentication Bypass

Exploit: HomeAutomation 3.3.2 - Authentication Bypass Date: 2019-12-30 Author: LiquidWorm Vendor: Tom Rosenback and Daniel Malmgren Product web page: http://karpero.mine.nu/ha/ Affected version: 3.3.2 Tested on: Apache/2.4.41 centos OpenSSL/1.0.2k-fips Advisory ID: ZSL-2019-5557 Advisory URL:...

DEBIAN-CVE-2019-13680

Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections...

CVE-2019-13680

Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections...

CVE-2019-13680: Undefined Security Weakness

Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections...

CVE-2019-13680

Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections...

PT-2019-4988

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to an inappropriate implementation in TLS, allowing a remote attacker to spoof a client's IP address to websites via crafted TLS connections. This is also associated...

Symantec Norton Password Manager IP Address Spoofing Vulnerability

Symantec Norton Password Manager is a password management application from Symantec USA. A security vulnerability exists in versions prior to Symantec Norton Password Manager 6.3.0.2082. The vulnerability can be exploited by an attacker to mask the attacker's original IP address...

PT-2019-3399

Name of the Vulnerable Software and Affected Versions Norton Password Manager versions prior to 6.3.0.2082 Description The issue is related to errors in IP packet processing, which may allow a remote attacker to spoof their IP address, disguising their origin and obscuring the source of network...

CVE-2019-9750

In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01...

CVE-2019-9750

In IoTivity up to version 1.3.1, the CoAP server interface is vulnerable to Distributed Denial of Service via source IP spoofing and UDP-based traffic amplification. The reflected traffic is reported to be six times larger than spoofed requests due to mishandling of a 4.01 Unauthorized response. ...

PT-2019-19842

Name of the Vulnerable Software and Affected Versions IoTivity versions prior to 1.3.1 note: 1.3.1 is the last version mentioned as affected, but no fixed version is provided Description The issue allows for Distributed Denial of Service attacks using source IP address spoofing and UDP-based...

Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow

!/usr/bin/python3 import argparse import requests import urllib.parse import binascii import re def runtarget: """ Execute exploitation """ We're using CVE-2018-10561 and/or it's extension in order to exploit this Authenticated RCE in usbForm method of GPON ONT. We can also exploit this issue aft...

Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow

Alcatel-Lucent Nokia GPON I-240W-Q - Buffer Overflow !/usr/bin/python3 import argparse import requests import urllib.parse import binascii import re def runtarget: """ Execute exploitation """ We're using CVE-2018-10561 and/or it's extension in order to exploit this Authenticated RCE in usbForm...

Snapchat: Client IP Spoofing using "X-Forwarded-For: 127.0.0.1" on "studio-app.snapchat.com" exposing bucket details

Researcher's summary is accurate. An attacker could view a variety of non-sensitive service config information by setting the X-Forwarded-For: 127.0.0.1 header on a specific service path. By adding "X-Forwarded-For: 127.0.0.1" as a header while requesting a certain path on a certain snapchat...

CVE-2018-9024

An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file...

CVE-2018-12331

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance aka SMA 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."...

CVE-2018-12331

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance aka SMA 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."...