AlienVault OSSIM/USM Remote Code Execution

This module exploits object injection, authentication bypass and ip spoofing vulnerabilities all together. Unauthenticated users can execute arbitrary commands under the context of the root user. By abusing authentication bypass issue on gauge.php lead adversaries to exploit object injection...

CVE-2016-4793

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header...

Design/Logic Flaw

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header...

UBUNTU-CVE-2016-4793

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header...

CVE-2016-4793

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header...

CVE-2016-4793

The CVE-2016-4793 issue affects CakePHP up to version 3.2.4, where the clientIp function can be coerced to accept spoofed IPs via the CLIENT-IP HTTP header. This enables remote IP spoofing and may bypass IP-based access controls and enable injection-like issues as described in linked advisories. ...

CVE-2016-4793

Removed by vendor...

CVE-2016-4793: Improper Input Validation

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header...

New IoT Botnet Malware Discovered; Infecting More Devices Worldwide

The whole world is still dealing with the Mirai IoT Botnet that caused vast internet outage last Friday by launching massive distributed denial of service DDoS attacks against the DNS provider Dyn, and researchers have found another nasty IoT botnet. Security researchers at MalwareMustDie have...

PT-2016-3323 · Apache +2 · Apache Http Server +2

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions prior to 2.4.24 Description: The issue is related to the implementation of mod remoteip and mod rewrite modules in the Apache HTTP Server, which is associated with insufficient authentication data verification. Thi...

CakePHP Framework 3.2.4 - IP Spoofing

Exploit for php platform in category web applications ============================================= - Release date: 12.05.2016 - Discovered by: Dawid Golunski - Severity: Medium ============================================= I. VULNERABILITY ------------------------- CakePHP Framework = 3.2.4 IP...

CakePHP Framework 3.2.4 - IP Spoofing

CakePHP Framework 3.2.4 - IP Spoofing ============================================= - Release date: 12.05.2016 - Discovered by: Dawid Golunski - Severity: Medium ============================================= I. VULNERABILITY ------------------------- CakePHP Framework = 3.2.4 IP Spoofing...

CakePHP Framework 3.2.4 - IP Spoofing

============================================= - Release date: 12.05.2016 - Discovered by: Dawid Golunski - Severity: Medium ============================================= I. VULNERABILITY ------------------------- CakePHP Framework = 3.2.4 IP Spoofing Vulnerability 3.1.11 2.8.1 2.7.10 2.6.12 II...

CakePHP Framework 3.2.4 IP Spoofing

http://legalhackers.com/advisories/CakePHP-IP-Spoofing-Vulnerability.txt ============================================= - Release date: 12.05.2016 - Discovered by: Dawid Golunski - Severity: Medium ============================================= I. VULNERABILITY ------------------------- CakePHP...

TaoCMS v2.5Beta5 ip可伪造导致储存型Xss

No description provided by source...

Gallery 2 2.0.2 - Multiple Vulnerabilities

Gallery 2 2.0.2 - Multiple Vulnerabilities Gallery 2 Multiple Vulnerabilities Vendor: Bharat Mediratta Product: Gallery 2 Version: = 2.0.2 Website: http://gallery.menalto.com/ BID: 16940 CVE: CVE-2006-1127 CVE-2006-1128 OSVDB: 23596 23597 SECUNIA: 19104 PACKETSTORM: 44358 Description: Gallery2, t...

Gallery 2 < 2.0.2 - Multiple Vulnerabilities

Gallery 2 Multiple Vulnerabilities Vendor: Bharat Mediratta Product: Gallery 2 Version: = 2.0.2 Website: http://gallery.menalto.com/ BID: 16940 CVE: CVE-2006-1127 CVE-2006-1128 OSVDB: 23596 23597 SECUNIA: 19104 PACKETSTORM: 44358 Description: Gallery2, the open source web based photo album...

Hide My WP <= 4.51.1 - Stored Cross-Site Scripting (XSS)

An attacker can make a fake attack attempt, with a JavaScripting payload, which will be logged by the plugin, resulting in XSS. The attacker also can spoof their IP address in the logs by setting the X-FORWARDED-FOR header. PoC curl --referer '...

WDCP一处小地方不严谨引发的一系列安全隐患

简要描述： 求打雷求打雷 貌似WDCP的用户好多呀，然后某宝上面用wdcp做控制面板开空间的也好多... WDCP一处小地方不严谨，引发成功登录和登录失败的IP均可以被伪造、“登录锁定”这个功能被绕过、登录记录前台无法查看、奇怪的生物混进来以及各种xss 详细说明： 本漏洞是基于 WooYun: WDCP后台的登录IP可被伪造 的再深入挖掘 系统信息 系统名称：WDlinux Control Panel 简称wdCP WD订阅 当前版本: wdcpv2.5.1120140926 最新 wdcpv2.5.1120140926 更新日志 操作系统：Linux 2.6.18-308.el5...

WDCP后台的登录IP可被伪造

简要描述： 据说可以让名字或ID,永久驻留wdcp的手册里 详细说明： 本漏洞台词方法灵感等部分or均来自 ksc 前辈某个漏洞的描述 （=感觉我厚脸皮呀=） 我不知道要不要这样说明一下噢，如果不需要的话，管理大大删掉这三段呗 获取用户ip的时候 使用了信息 X-Forwarded-For 假如仅仅是提示用户的地方使用的此信息，则问题不是很严重 若其他地方有基于ip地址做安全校验的地方就修改下代码吧 首先，在一些改X-Forwarded-For的插件里面，改自己想要的IP，比如9.9.9.9 然后登录 漏洞证明：...