https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 02:18:27 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-113507 <p>A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-Ip results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The vendor confirms: &#34;The reported X-Real-Ip IP-bypass vulnerability has already been fixed&#34;.</p> <p>A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-Ip results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The vendor confirms: &#34;The reported X-Real-Ip IP-bypass vulnerability has already been fixed&#34;.</p> https://db.gcve.eu/vuln/fkie_cve-2026-113507 https://db.gcve.eu/vuln/ghsa-vvxf-x39h-gvfp <p>A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-Ip results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The vendor confirms: &#34;The reported X-Real-Ip IP-bypass vulnerability has already been fixed&#34;.</p> <p>A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-Ip results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The vendor confirms: &#34;The reported X-Real-Ip IP-bypass vulnerability has already been fixed&#34;.</p> https://db.gcve.eu/vuln/ghsa-vvxf-x39h-gvfp