GHSA-RVM3-566M-V7FV Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Impact Capacitor's WebView navigation guard validated only the host and scheme of a target URL, not its path. Because the internal HTTP proxy path /capacitorhttpinterceptor is served at the application's own origin, a frame navigation to it was always treated as in-app navigation and allowed...

impersonate-proxy

impersonate-proxy English | 日本語 | 简体中文 A local MITM proxy that lets you control TLS fingerprints JA3/JA4, HTTP/2 fingerprints, HTTP header order, User-Agent, and source IP headers — all from a single YAML config file. A Chrome extension is included for toggling the proxy and switching fingerprint...

GHSA-X965-FC75-JPQH vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

Summary vm2 3.11.6 this fork's latest release contains an incomplete-fix bypass of the Error.cause host-reference sanitization added in GHSA-m283-3h24-438v commit 7e3faaf. Sandbox code that catches a host-wrapped AggregateError which is revisited within a single handleException traversal...

CVE-2026-93315

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315

The BuildKit build engine is vulnerable to a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) when using proxy networking with CA injection. A build step can modify the CA bundle before the cleanup process occurs, potentially causing the cleanup to block, execute outside the build root...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

Arti Mobile - Tor in Rust for Android and iOS

Arti Mobile：用于Android和iOS的Rust版Tor 官方Arti Mobile库，由Tor Project支持，将新的Tor Rust运行时引入移动设备。 这是一个共享项目，旨在为Android和iOS应用程序公开Tor Arti的标准API。 该项目基于以下项目： Trinity 的 https://gitlab.torproject.org/trinity-1686a/arti-mobile-example/ uniq 的 https://codeberg.org/uniqx/arti-android ahf 的...

osiris

⬡ OSIRIS Open Source Intelligence & Reconnaissance Integrated System A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface. Live Demo · Report Bug ·...

CVE-2026-20896

CVE-2026-20896 Gitea 的官方 Docker 镜像（最高至 1.26.2 及包括该版本）在其默认配置中包含了 REVERSEPROXYTRUSTEDPROXIES = 。如果你开启了反向代理登录，这个通配符意味着每个来源 IP 都被视为可信代理，因此任何能访问该端口的人都可以发送 X-WEBAUTH-USER 头部并以任意用户身份登录。无需密码，无需令牌。 我已将此问题报告给 Gitea，并在 1.26.3 / 1.26.4 中修复。本仓库是我自己的分析报告、一个可用的 PoC 以及一个检测工具。这是一个已修补的公开漏洞。 CVE...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

cve-2026-20896-gitea-poc

CVE-2026-20896 Gitea Docker 认证绕过检测器 仅限授权的红队/渗透测试操作。 本仓库包含 CVE-2026-20896 的极简检测器，该漏洞是官方 Gitea Docker 镜像在启用反向代理认证时存在的认证绕过漏洞，影响版本直至并包括 1.26.2。 CVE-2026-20896 是什么 受影响的 Gitea Docker 镜像附带了一个包含以下内容的 app.ini 模板： REVERSEPROXYTRUSTEDPROXIES = 当管理员启用： ENABLEREVERSEPROXYAUTHENTICATION = true Gitea...

CVE-2026-78122-POC

CVE-2026-78122 — Prueba de concepto Tecnativadocker-socket-proxy ≤ 0.5.0 — Granularidad insuficiente del control de acceso CWE-1220 CVSS 4.0: 8.3 Alta — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N El vector de ataque es Adyacente AV:A: el atacante necesita acceso de red...

CVE-2026-43499

CVE-2026-43499 — Linux 内核 Futex PI 释放后使用 漏洞 kernel/locking/rtmutex.c 中的 removewaiter 被慢速锁路径使用，同时也在 futexrequeue 调用 rtmutexstartproxylock 时用于代理锁回滚。 在代理锁场景下，waiter::task 并不是 current，但 removewaiter 错误地对 current 进行操作。这会导致三个问题： 1. rbtree 出队时没有持有 waiter::task::pilock。 2. 等待者任务的 piblockedon...

CVE-2026-59783

A flaw was found in Zabbix Server and Proxy. In deployments configured with a MySQL or MariaDB database backend, an authenticated remote attacker can cause a denial of service DoS by submitting binary items containing null bytes. This improper input handling causes the server or proxy process to...

CVE-2024-38473

Apache HTTP Server 中 modproxy 编码问题的概念验证 PoC 该仓库包含用于演示 Apache HTTP Server 2.4.59 及更早版本中 modproxy 模块编码问题的概念验证 PoC 脚本。此漏洞允许将编码不正确的请求 URL 发送到后端服务，从而可能通过精心构造的请求绕过身份验证。 目录 漏洞描述 设置与使用 重要注意事项 缓解措施 漏洞描述 CVE-ID ： 待定 概述 ： Apache HTTP Server 2.4.59 及更早版本中 modproxy 模块的编码问题允许将编码不正确的请求 URL...

Vite-CVE-2025-30208-Scanner

一款用于检测Vite CVE-2025-30208漏洞的自动化工具，支持批量扫描和结果保存。 功能特性 ✅ 彩色终端输出 ✅ 批量目标扫描（支持文件导入） ✅ 多线程并发检测（可调线程数） ✅ 自动保存漏洞结果（带时间戳） ✅ 代理服务器支持 ✅ 自定义检测路径 ✅ 使用随机请求头 安装使用 1. 克隆仓库： git clone https://github.com/marino-admin/Vite-CVE-2025-30208-Scanner.git cd Vite-CVE-2025-30208-Scanner 安装依赖： pip install -r requirements.tx...

Confluence-RCE

Uso: python3 mian.py Detección Ejecución de comandos Reverse shell Soporte para proxy socks5 y http Solo para intercambio y aprendizaje...

CVE-2023-36802

CVE-2023-36802 CVE-2023-36802 野外案例 说明 使用 PreviousMode 覆盖原语 https://cwresearch.tistory.com/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 致谢 chompie Google Project 0...