cve-2026-49352-poc

CVE-2026-49352 — 9router Hardcoded JWT Secret Authentication Bypass Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-49352 is a vulnerability in 9router, a self-hosted Node.js/Next.js...

oauth2-proxy

OAuth2 Proxy — это гибкий инструмент с открытым исходным кодом, который может выступать как в роли автономного обратного прокси, так и в роли middleware-компонента, интегрируемого в существующие настройки обратного прокси или балансировщика нагрузки. Он предоставляет простой и безопасный способ...

Simulation_CVE-2024-46256

CVE-2024-46256 & CVE-2024-46257 – PoC Simulation Overview This repository contains a step-by-step, image-backed Proof of Concept PoC simulating two vulnerabilities in Nginx Proxy Manager that enable OS Command Injection, leading to Remote Code Execution RCE after authentication. Affected product:...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, ntpd-rs, vector, sccache, apollo-router, komodo...

GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: vector, linkerd2-proxy, ntpd-rs, sccache...

GHSA-5J98-2G5X-46V6 vulnerabilities

Vulnerabilities for packages: vector, linkerd2-proxy, ntpd-rs, sccache...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: vector, linkerd2-proxy, ntpd-rs, sccache...

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

Squid Proxy - HTTP Authentication Credentials Disclosure

Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...

SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

proxychains

ProxyChains версия 4.3.0 README ProxyChains — это UNIX-программа, которая перехватывает сетевые функции libc в динамически скомпонованных программах через предварительно загружаемую DLL и перенаправляет соединения через SOCKS4a/5 или HTTP-прокси. ВНИМАНИЕ: эта программа работает только с...

CVE-2026-106243

An incomplete cleanup flaw was found in the Proxy Auth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533426590...

CVE-2026-106214

An information leak flaw was found in the Proxy component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533493992...

Security Bulletin: Multiple Vulnerabilities in Axios affect IBM Cloud Pak System

Summary Due to the use of Axios, multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-42264 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config...

PT-2026-107682

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x and 2.16.1 on 2.x, the client infers that an HTTP proxy tunnel exists from the last request method rather than the CONNECT result. After a pro...

Linux Distros Unpatched Vulnerability : CVE-2026-106214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network...

Linux Distros Unpatched Vulnerability : CVE-2026-106243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffi...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059...

PT-2026-107565

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

Debian dla-4826 : puma - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected]...