NimDllSideload

Nim DLL サイドローディング このリポジトリを使用すると、サイドローディング/プロキシローディングに利用できる Nim DLL を簡単に生成できます。 DLL サイドローディングに詳しくない場合は、こちらのブログ記事をご覧ください。 どうやって使うのか？ プロキシしたい正規の DLL（または複数の DLL）をこのリポジトリの build ディレクトリに置き、make を実行してください。 これにより、out ディレクトリに2つの .dll が生成されます。 ランダムな名前のものは、関数呼び出しがプロキシされる元の DLL です。 もう1つはあなたのペイロードになります。...

CVE-2026-105486

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. id: CVE-2020-17506 info: name: Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection author:...

litellm-sqli-scanner

LiteLLM SQLインジェクションスキャナー CVE-2026-42208 — LiteLLM Proxy における SQL インジェクション LiteLLM Proxy のデータベース層における SQL インジェクションの脆弱性 CVE-2026-42208 を検出・検証します。 許可されたセキュリティテスト専用です。 特徴 CVE-2026-42208 SQLインジェクションの検出 LiteLLM Proxy バージョンのフィンガープリント PoC 検証ペイロード 構造化された JSON / テキスト出力 要件 Python 3.8+ 使用方法 python...

CVE-2026-105486 OSSRS srs System API api.go systemAPI.Run missing authentication

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

EUVD-2026-92916

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-105486 OSSRS srs System API api.go systemAPI.Run missing authentication

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

repeat-strike

Repeater Strike Repeater Strike は、Repeater リクエストを分析することで IDOR やその他の脆弱性の発見を支援する AI 搭載ツールです。テスト対象のリクエストとレスポンスに基づいて、対象を絞った正規表現を自動生成します。脆弱性が検出されると、これらの正規表現がプロキシ履歴に適用され、トラフィック全体から類似の問題を迅速に特定できるため、発見の規模を拡大し、時間を節約できます。 インストール手順 Burp Suite Professional で、Extensions- BApp store に移動し、Repeater Strike...

PT-2026-107272

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.6.17 Description The @backstage/plugin-proxy-backend package contains improper input validation within the proxy-backend. An authenticated user can craft a request URL that forces the proxy-backend to forward the...

CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message rega...

Linux Distros Unpatched Vulnerability : CVE-2026-59783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability...

Linux Distros Unpatched Vulnerability : CVE-2026-59786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access...

PT-2026-107245

Name of the Vulnerable Software and Affected Versions Backstage versions 0.5.0 through 0.6.17 Description The @backstage/plugin-proxy-backend package contains inconsistent credential enforcement for overlapping proxy routes. This occurs when an operator configures overlapping proxy paths with...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can cra...

PT-2026-106780

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-stripe versions prior to 3.90.0 @payloadcms/plugin-stripe versions prior to 4.0.0-canary.34 Description An authenticated user can perform unintended Stripe operations by accessing the enabled optional Stripe REST proxy. This...

CVE-2026-105848: Exposed Dangerous Method or Function

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reach the enabled optional Stripe REST proxy can perform unintended Stripe operations. This issue is...

Security Advisory 0196

Security Advisory 0196 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-102164 CVSSv3.1 Base Score: 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSSv4.0 Base Score: 2.3...

PT-2026-106764

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

PT-2026-107150

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

PT-2026-106889

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...