Lucene search
+L

7 matches found

OSV
OSV
•added 2026/07/31 3:50 a.m.•19 views

CVE-2026-63220 CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()

CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure trusted the X-Forwarded-Proto and Front-End-Https headers from any incoming request, allowing an attacker could spoof these headers and cause the application to incorrectly treat an HTTP request a...

4.8CVSS5.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/19 1:11 p.m.•10 views

CVE-2026-44087 Apache APISIX: Openid-connect plugin Identity Header Spoofing

Insufficient Verification of Data Authenticity vulnerability in Apache APISIX. The openid-connect plugin under default configuration has an attack surface that allows the attacker to spoof identity headers allowing the attacker to get unauthorized access the protected resources. This issue affect...

5.3CVSS7.9AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•21 views

PT-2026-25141

wpDiscuz before 7.6.47 contains an IP spoofing vulnerability in the getIP function that allows attackers to bypass IP-based rate limiting and ban enforcement by trusting untrusted HTTP headers. Attackers can set HTTP CLIENT IP or HTTP X FORWARDED FOR headers to spoof their IP address and circumve...

6.9CVSS5.8AI score0.00152EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-6693

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00601EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/09/16 9:15 a.m.•8 views

CVE-2022-2877

The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers...

5.3CVSS5.9AI score0.00758EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2006/02/06 12:00 a.m.•104 views

SECURITY.NNOV: The Bat! 2.x message headers spoofing

Title: The Bat! 2.x message headers spoofing Author: 3APA3A [email protected] Homepage: http://www.security.nnov.ru/ Advisory URL: http://www.security.nnov.ru/advisories/thebatspoof.asp Vendor: RitLabs Vendor's page http://thebat.net/ Application: The Bat 2.x 2.12.04 tested Not vulnerable:...

0.6AI score
SaveExploits0
security_vulns
security_vulns
•added 2000/02/03 12:00 a.m.•98 views

The Bat! X-BAT-FILES

"The Bat!" by RitLabs is extremely convenient mail agent with a lot of features for Windows platforms. One of "The Bat!" features is storing files attached to e-mail messages apart from messages bodies. In this case "The Bat!" puts attached files in preconfigured folder and removes according MIME...

0.5AI score
SaveExploits0
Rows per page
Query Builder