CVE-2002-2397

Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed 1 source IP address of 127.0.0.1 or 2 network address of 127.0.0.0...

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...

CVE-2002-1943

SafeTP 1.46, when network address translation NAT is being used, leaks the internal IP address of the FTP server in a response to a passive mode PASV file transfer request...

CVE-2002-1962

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname...

CVE-1999-0667

The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service...

CVE-1999-0195

Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2025-1397)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-0970

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value...

CVE-2024-0970 User Activity Tracking and Log < 4.1.4 - IP Spoofing

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value...

IP Filtering Bypass

@misskey-dev/summaly is vulnerable to IP Filtering Bypass. The vulnerability is due to improper validation of HTTP redirects, where private IP address checks are applied only to the HEAD response but not to the GET response, allowing redirection to private IPs...

Malicious code in frau-hoster (npm)

This packages collect system information and attempt to send it to remote servers, details include hostname, OS, IP address, username and current working directory. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

PT-2025-25781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's MCTP implementation has been resolved. The issue occurs in the mctp dump addrinfo function when ifa index is accessed without proper initialization,...

Restrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047

The Restrict route by IP module provides an interface to manage route restriction by IP address. The module doesn't sufficiently protect certain routes from CSRF attacks. This vulnerability is mitigated by the fact that you need to know the route machine name...

Disable the Source Packet Routing

In a network, source routing allows the sender to specify some or all routes for data packets to pass through the network. In regular routing, routers in the network determine the path based on the destination of the data packets. If a large number of packets are tampered with and pass through th...

Enable Reverse Path Filtering

Setting net.ipv4.conf.all.rpfilter and net.ipv4.conf.default.rpfilter to 1 forces the Linux kernel to perform reverse path filtering on a received packet and check the validity of its source address. If the Linux kernel queries the routing table in which the source address is included and finds...

django: potential denial-of-service vulnerability in IPv6 validation

A flaw was found in the Django framework. Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial of service attack. The undocumented and private functions cleanipv6address and isvalidipv6address were vulnerable, as was the...

CVE-2025-46635

CVE-2025-46635 relates to Tenda RX2 Pro (firmware 16.03.30.14). The issue is improper network isolation between the guest Wi‑Fi network and other router interfaces, enabling an authenticated guest to access router resources and other networks by configuring a static IP in the non‑guest subnet on ...

CVE-2025-32470

A remote unauthenticated attacker may be able to change the IP adress of the device, and therefore affecting the availability of the device...

Malicious code in pie-docs (npm)

This package steals IP address and sent it to C&C server in preinstall hook. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6326ffe9d39e0d889a1a93b2faf51b274055e4a9f12f3596cdca2f85098245d3 Any computer that has this package installed or running should be considered...

MAL-2025-3660 Malicious code in pie-docs (npm)

This package steals IP address and sent it to C&C server in preinstall hook. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6326ffe9d39e0d889a1a93b2faf51b274055e4a9f12f3596cdca2f85098245d3 Any computer that has this package installed or running should be considered...