F5 Networks BIG-IP : BIG-IP HTTP/2 vulnerability (K000140968)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.7.0.4.5-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000140968 advisory. When HTTP/2 client and server profiles are simultaneously configured on a...

PT-2025-20309 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions affected versions not specified Description: The issue occurs when a Session Initiation Protocol SIP message routing framework MRF application layer gateway ALG profile is configured on a Message Routing virtual server. In...

PT-2025-20303 · F5 · Big-Ip Apm

Name of the Vulnerable Software and Affected Versions: BIG-IP APM affected versions not specified Description: The issue occurs when a BIG-IP APM virtual server is configured to use a PingAccess profile, allowing undisclosed requests to cause TMM to terminate. No information is provided about the...

Restrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047

The Restrict route by IP module provides an interface to manage route restriction by IP address. The module doesn't sufficiently protect certain routes from CSRF attacks. This vulnerability is mitigated by the fact that you need to know the route machine name...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A code issue vulnerability exists in the F5 BIG-IP that stems from a SIP MRF ALG configuration that results in TMM termination...

F5 Networks BIG-IP : BIG-IP HTTP vulnerability (K000139571)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000139571 advisory. When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests c...

Enable Reverse Path Filtering

Setting net.ipv4.conf.all.rpfilter and net.ipv4.conf.default.rpfilter to 1 forces the Linux kernel to perform reverse path filtering on a received packet and check the validity of its source address. If the Linux kernel queries the routing table in which the source address is included and finds...

Disable the Source Packet Routing

In a network, source routing allows the sender to specify some or all routes for data packets to pass through the network. In regular routing, routers in the network determine the path based on the destination of the data packets. If a large number of packets are tampered with and pass through th...

PT-2025-20308 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: The issue occurs when connection mirroring is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP...

F5 BIG-IP APM 安全漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A security vulnerability exists in F5 BIG-IP APM that stems from a PingAccess configuration that causes TMM to terminate...

F5 iControl REST和F5 BIG-IP TMOS Shell 命令注入漏洞

F5 iControl REST and F5 BIG-IP TMOS Shell are both products of F5 Corporation, U.S.A. F5 iControl REST is a development framework. and F5 BIG-IP TMOS Shell is a command line. A command injection vulnerability exists in F5 iControl REST and F5 BIG-IP TMOS Shell that stems from command injection an...

F5 Networks BIG-IP : SCTP vulnerability (K000137709)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000137709 advisory. When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed...

F5 Networks BIG-IP : Appliance mode BIG-IP iControl REST and tmsh vulnerability (K000148591)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.7 / 16.1.6 / 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000148591 advisory. When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl RES...

F5 Networks BIG-IP : BIG-IP SIP ALG profile vulnerability (K000140937)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / BIGIP-15.1.10.7.0.4.5-ENG. It is, therefore, affected by a vulnerability as referenced in the K000140937 advisory. When a Session Initiation Protocol SIP message routing framework MRF application layer...

F5 Networks BIG-IP : BIG-IP PEM vulnerability (K000149952)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2.2 / BIGIP-15.1.10.7.0.4.5-ENG. It is, therefore, affected by a vulnerability as referenced in the K000149952 advisory. When a BIG-IP PEM system is licensed with URL categorization, and the URL categorizatio...

Disable IP Forwarding

If a node does not function as a gateway server, disable the IP forwarding function. Otherwise, attackers can use the node as a router. In the container scenario, if network packets need to be forwarded through the host, IP forwarding is allowed. SPDX-FileCopyrightText: 2025 Greenbone AG Some tex...

Gitlab -- vulnerabilities

Gitlab reports: Partial Bypass for Device OAuth flow using Cross Window Forgery Denial of service by abusing Github import API Group IP restriction bypass allows disclosing issue title of restricted project...

django: potential denial-of-service vulnerability in IPv6 validation

A flaw was found in the Django framework. Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial of service attack. The undocumented and private functions cleanipv6address and isvalidipv6address were vulnerable, as was the...

@misskey-dev/summaly allows IP Filter Bypass via Redirect

Summary Due to a validation error in got.scpaping, it is possible to use an HTTP redirect to avoid IP filtering. Details In got.scpaping, Summaly first makes a HTTP HEAD request to the page being summarized. It then preforms private IP address checks on the HEAD response, then makes an additional...

GHSA-JQX4-9GPQ-RPPM @misskey-dev/summaly allows IP Filter Bypass via Redirect

Summary Due to a validation error in got.scpaping, it is possible to use an HTTP redirect to avoid IP filtering. Details In got.scpaping, Summaly first makes a HTTP HEAD request to the page being summarized. It then preforms private IP address checks on the HEAD response, then makes an additional...