GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: sccache, vector, ntpd-rs, linkerd2-proxy...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: sccache, vector, ntpd-rs, linkerd2-proxy...

SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

Squid Proxy - HTTP Authentication Credentials Disclosure

Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...

proxychains

ProxyChains версия 4.3.0 README ProxyChains — это UNIX-программа, которая перехватывает сетевые функции libc в динамически скомпонованных программах через предварительно загружаемую DLL и перенаправляет соединения через SOCKS4a/5 или HTTP-прокси. ВНИМАНИЕ: эта программа работает только с...

CVE-2026-106243

A flaw was found in Google Chrome's proxy authentication Proxy Auth component. Incomplete cleanup allows an adjacent attacker to obtain sensitive information. An attacker can exploit this vulnerability by transmitting crafted network traffic...

CVE-2026-106214

An information leak flaw was found in the Proxy component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533493992 https://code.google.com/p/chromium/issues/detail?id=106214...

adfsbrute

adfsbrute Un script pour tester des identifiants contre Active Directory Federation Services ADFS, calculer l'URL ADFS d'une organisation et permettre des attaques par pulvérisation de mots de passe ou par force brute. L'idée principale est de mener des attaques par pulvérisation de mots de passe...

Security Bulletin: Multiple Vulnerabilities in Axios affect IBM Cloud Pak System

Summary Due to the use of Axios, multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-42264 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config...

PT-2026-107714

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, a proxied ws request is carried through CONNECT, but NettyRequestFactory.newNettyRequest and requestUri decide whether to attach proxy...

PT-2026-107565

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

Debian dla-4826 : puma - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected]...

PT-2026-107493

Missing authentication has been found in remote-execution task updates in the smart proxy dynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remo...

PT-2026-107676

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...

CVE-2026-106214

Information leak in Proxy in Google Chrome on on Windows prior to 155...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059...

PT-2026-107682

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x and 2.16.1 on 2.x, the client infers that an HTTP proxy tunnel exists from the last request method rather than the CONNECT result. After a pro...

Linux Distros Unpatched Vulnerability : CVE-2026-106214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network...

Linux Distros Unpatched Vulnerability : CVE-2026-106243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffi...