Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 19:04:51 +0000 CVE-2026-108555 — PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Header https://db.gcve.eu/vuln/cve-2026-108555 <p><strong>Affected:</strong> schlagmichdoch PairDrop</p> <p>PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks&#39; discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim&#39;s public IP can appear as a local device on self-hosted instances not behind Cloudflare to send or receive files.</p> <p><strong>Affected:</strong> schlagmichdoch PairDrop</p> <p>PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks&#39; discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim&#39;s public IP can appear as a local device on self-hosted instances not behind Cloudflare to send or receive files.</p> https://db.gcve.eu/vuln/cve-2026-108555