250 matches found
PT-2026-1292
Name of the Vulnerable Software and Affected Versions Mega-Fence versions 25.1.914 and prior Description The software does not validate a trusted proxy chain when using the X-Forwarded-For XFF header to determine the client IP address. An attacker can manipulate the XFF header to spoof the client...
CVE-2025-66577 cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can supply X-Forwarded-For or X-Real-IP headers which...
CVE-2025-51663
FileCodeBox (up to 2.2) includes an IP rate-limiting flaw in the IPRateLimit implementation that lets remote attackers bypass ip-based rate limits and failed attempt restrictions by forging X-Real-IP and X-Forwarded-For headers. This can enable DoS or brute-force sharing code attempts. Affected c...
CVE-2025-12094
The OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments No CAPTCHA plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers such as CF-Connecting-IP, X-Forwarded-For,...
EUVD-2025-37313
The OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments No CAPTCHA plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers such as CF-Connecting-IP, X-Forwarded-For,...
WordPress plugin OOPSpam Anti-Spam 安全漏洞
WordPress OOPSpam Anti-Spam plugin is an anti-spam plugin designed for WordPress that protects forms and comments from spam through AI and machine learning techniques without the use of CAPTCHA validation. The WordPress OOPSpam Anti-Spam plugin suffers from an IP header forgery vulnerability that...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2296)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ipv6: fix panic when forwarding a pkt with no in6 devCVE-2022-49048 netfilter: conntrack: revisit gc autotuningCVE-2022-49110 bpf, sockmap: Fix...
EUVD-2013-6508
Malware in sbrugna...
EUVD-2018-11199
Malware in sbrugna...
EUVD-2007-1957
Malware in sbrugna...
EUVD-2020-9391
Malware in sbrugna...
EUVD-2015-4224
Malware in sbrugna...
EUVD-2007-0965
Malware in sbrugna...
EUVD-2011-1331
Malware in sbrugna...
EUVD-2020-9465
Malware in sbrugna...
EUVD-2020-23343
Malware in sbrugna...
EUVD-2007-1169
Malware in sbrugna...
EUVD-2024-44444
Malicious code in bioql PyPI...