32 matches found
CVE-2025-66508
1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies TrustedProxies = 0.0.0.0/0, allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls...
EUVD-2006-1257
Malware in sbrugna...
Exploit for Path Traversal in Mikrotik Routeros
This is a PoC exploit for CVE-2018-14847 targeting RouterOS-based routers. The tool, named Meris RouterOS Checker, checks a list of IP addresses to validate if they were infected with Meris. It uses the RouterOS API, SSH, and WinBox to connect to the routers and attempt to exploit the...
Malicious code in ip-checks (npm)
The package ip-checks was found to contain malicious code...
MAL-2025-42014 Malicious code in ip-checks (npm)
The package ip-checks was found to contain malicious code...
ALPINE-CVE-2022-43548
A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.Th...
AZL-11577 CVE-2022-43548 affecting package nodejs for versions less than 16.18.1-2
A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.Th...
PT-2022-14094 · WordPress · Iq Block Country
Name of the Vulnerable Software and Affected Versions: iQ Block Country WordPress plugin versions prior to 1.2.20 Description: The issue allows threat actors to bypass the block feature by spoofing HTTP headers, as the plugin does not properly check these headers to validate the origin IP address...
Authentication flaw
Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address...
CVE-2006-1253
Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address...
CVE-2006-1253
CVE-2006-1253 affects glFTPd prior to 2.01 RC5, where a crafted DNS hostname could bypass IP checks, potentially spoofing an IP-like hostname. The PT-2006-2269 entry confirms the vulnerable range and provides a remediation: update to version 2.01 RC5 or later. No exploitation details are provided...
