CVE-2026-49332

The CVE-2026-49332 entry concerns openshift/oauth-proxy. Affected component: the proxy handling of authenticated identity headers. Root cause: the proxy uses dash-variant headers (e.g., X-Forwarded-User) but does not strip underscore-variant headers (X_Forwarded_User). Because WSGI and PHP framew...

EUVD-2026-49767

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys X-Forwarded-User but does not strip underscore-variant keys XForwardedUser from incoming requests. WSGI and PHP frameworks normalize both variants to the same variable, allowing a...

CVE-2026-49332 Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys X-Forwarded-User but does not strip underscore-variant keys XForwardedUser from incoming requests. WSGI and PHP frameworks normalize both variants to the same variable, allowing a...

CVE-2026-49332

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys X-Forwarded-User but does not strip underscore-variant keys XForwardedUser from incoming requests. WSGI and PHP frameworks normalize both variants to the same variable, allowing a...

CVE-2026-49332 Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys X-Forwarded-User but does not strip underscore-variant keys XForwardedUser from incoming requests. WSGI and PHP frameworks normalize both variants to the same variable, allowing a...

CVE-2026-49332

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys X-Forwarded-User but does not strip underscore-variant keys XForwardedUser from incoming requests. WSGI and PHP frameworks normalize both variants to the same variable, allowing a...

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

Artica Proxy - Unauthenticated LFI Detection

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...

Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection Detection

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. !/usr/bin/env python3 -- coding: utf-8 -- """Artica Web Proxy 4.""" from kittysploit import from...

Geoserver - Server-Side Request Forgery Detection

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery Detection

Onair2 3.9.9.2 and KenthaRadio 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery. !/usr/bin/env python3 -...

LiteLLM Proxy - Model Exposure Detection

LiteLLM proxy was detected with anonymous access to the model listing API. LiteLLM proxies that ship without generalsettings.masterkey or with the key disabled expose the configured upstream model catalog via /v1/models and /model/info — revealing which OpenAI / Anthropic / Azure / Bedrock /...

Apache Tomcat JK Connect <=1.2.44 - Manager Access Detection

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

Mailpit < 1.28.3 - Server-Side Request Forgery Detection

Mailpit = 1.28.0 contains a server-side request forgery caused by insufficient validation of internal IP addresses in the /proxy endpoint, letting attackers make requests to internal network resources, exploit requires crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Mailpi...

DeleGate PROXY-FTP Service - Detect

DeleGate PROXY-FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DeleGate PROXY-FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'DeleGate...

Sidewinder FTP Proxy Service - Detect

Sidewinder FTP Proxy service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sidewinder FTP Proxy service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

BlueCoat Telnet Proxy - Detect

Detects Blue Coat telnet proxy services. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Blue Coat telnet proxy services.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'BlueCoat...

X-Proxy Dashboard Panel - Detect

X-Proxy Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """X-Proxy Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'X-Proxy Dashboard Panel - Detect', 'description...

SAP Web Dispatcher detection

Detection of SAP Web Dispatcher service !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Web Dispatcher service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Web Dispatcher detection',...

Detect tor SOCKS proxy

Detects Detect tor SOCKS proxy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect tor SOCKS proxy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect tor SOCKS proxy', 'description': 'Detects Detect tor...