Search Vulnerabilities

'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL

Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass

FileCodeBox < 2.4 Anti-bruteforce Rate Limit Bypass via Spoofed Headers

Caddy Defender trusted proxy client IP bypass

Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP address in ...

9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF

Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing

Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 thro...

LibreTranslate - IP Spoofing via X-Forwarded-For Header

Hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment

ProxySQL: PROXY-Protocol-v1 UNKNOWN parses spoofed source IP, bypassing mysql_query_rules.client_addr ACL

Apache APISIX: wolf-rbac plugin Identity Spoofing

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks,...

HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header

Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file

Bulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, enabling rate limit bypass and audit log forgery