CVE-2023-4631

CVE ID : CVE-2023-4631 Vulnerability Type : IP Address Spoofing Description : The DoLogin Security plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 3.6. This is due to insufficient restrictions on where the IP Address information is being retrieved for...

dontgo403

dontgo403 is a tool to bypass 40X errors. Installation Grab the latest release for your OS from RELEASES Outdated atm Or compile by your own RECOMMENDED: root@kitploit: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build Customization If you want to edit or add new...

Nac_Bypass_Agent

Nac Bypass Agent This piece of code is a script written in Python and designed to run on Kali Linux. Here is a summary explaining what each function does: runcommandcommand: This function runs the command it takes as input and returns its output. killnetworkservices: This function stops the...

Typecho-Multiple-Vulnerabilities

Typecho Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2024-35538: In Typecho v1.3.0 there is a Client IP Spoofing vulnerability, which allows malicious actors to falsify their IP addresses by specifying an arbitrary IP as value of...

Dosinator

DoSinator DoSinator is a powerful Denial of Service DoS testing tool developed in Python. Designed for security professionals and researchers, this tool allows them to simulate various DoS attacks, providing a realistic environment for assessing the resilience of networks, systems, and applicatio...

ipeeyoupeewepee

ipeeyoupeewepee Un escáner y suite de ataque para hosts en internet público principalmente routers Cisco que reenvían paquetes no autenticados encapsulados en los protocolos IP-in-IP y GRE. Esta vulnerabilidad, conocida como "Insecure Implementation of Tunneling Protocols", está rastreada bajo...

CVE-2026-86485

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks...

CVE-2026-86485

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks...

CVE-2026-86485

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks...

CVE-2026-86485

JetBrains YouTrack prior to version 2026.2.18634 is vulnerable to IP spoofing via HTTP headers , which allowed an attacker to forge Bitbucket webhook events. The underlying cause is the lack of proper source validation on incoming webhook requests, permitting a local actor with user interaction t...

EUVD-2026-72501

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks...

fireprox

FireProx 概要 利点 免責事項 メンテナー クレジット 基本的な使い方 インストール スクリーンショット 貢献 概要 Web呼び出しの送信元IPアドレスを隠したり継続的にローテーションすることは、難しくてコストがかかる場合があります。これまでにもいくつかのツールが存在しましたが、IPアドレスの数が限られていたり、高価だったり、多数のVPSをデプロイする必要がありました。FireProxはAWS API...

CVE-2026-84186

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

CVE-2026-84186

This vulnerability affects PrestaShop and resides in the Tools::getRemoteAddr() function. When the application runs behind a reverse proxy, load balancer, or CDN, it incorrectly trusts the client-supplied X-Forwarded-For header instead of the IP provided by the trusted infrastructure, allowing an...

CVE-2022-46169

CVE-2022-46169 Cacti 盲远程代码执行（预认证） 免责声明 本内容仅供教育目的使用。我不对你的行为负责。请自行斟酌使用。 说明 该脚本暴力破解利用此漏洞所需的变量。此漏洞利用需要以下 3 个变量： 白名单 IP 地址 正确的 hostid 参数 正确的 localdataids 参数 文件 remoteagent.php 受 IP 白名单保护。你可以通过在 X-Forwarded-IP 头中伪造你的 IP 地址来绕过此保护。大多数实例会将 127.0.0.1 或服务器自身的 IP 地址加入白名单。 接下来，你需要暴力破解 hostid 和 localdataids...

CVE-2026-8447

IBM Langflow OSS versions 1.0.0 through 1.11.2 contain a stored cross-site scripting vulnerability in the Playground chat interface. The root cause is the MarkdownField component rendering chat messages via the rehypeRaw plugin without a sanitization pass, allowing attacker-controlled LLM respons...

CVE-2026-9186

IBM Langflow OSS versions 1.0.0 through 1.11.2 contain an improper access control vulnerability (CWE-284) in the MCP configuration installation endpoint. The endpoint enforces a localhost-only restriction using a client IP helper that blindly trusts the X-Forwarded-For header without verifying th...

burpFakeIP

burpFakeIP Descarga y uso: Releases 2021/09/24 1. Se corrigió un bug reportado por M00nBack. 2. Se añadió el interruptor de AutoXFF, y AutoXFF está desactivado por defecto. Si deseas que el plugin añada una cabecera XFF aleatoria a cada petición, puedes activarlo seleccionando ON en el menú...

Cisco-SNMP-Slap

VISIÓN GENERAL cisco-snmp-slap utiliza la suplantación de direcciones IP para evadir una ACL que protege un servicio SNMP en un dispositivo Cisco IOS. Normalmente, la suplantación de IP tiene un uso limitado en ataques reales, aparte de DoS. Ningún servicio TCP puede completar el handshake inicia...

CVE-2026-14840

CVE-2026-14840 — YOP Poll 7.0.6 投票限制绕过 作者： nullwhisper 用途： 仅限授权的安全研究 / 漏洞验证。 这是什么？ YOP Poll 插件 7.0.6 之前的版本强制实施每个 IP 只能投一票的限制。问题在于，为了获取客户端 IP，它会先检查 HTTPCLIENTIP 和 HTTPXFORWARDEDFOR，然后才检查 REMOTEADDR。这两个头都由攻击者控制，因此未认证用户可以在每次请求时伪造一个新 IP，从而投出无限数量的票。 CVE： CVE-2026-14840 产品： YOP Poll WordPress 插件 受影响版本：...