CVE-2025-11915

CVE-2025-11915 involves a connection desynchronization issue between an HTTP proxy and the Vertex AI model backend. Root cause: synchronization mismatch across the proxy-backend boundary. Impact is described as affecting certain third-party models, with fixes rolled out for all proxies in front o...

EUVD-2025-35358

Connection desynchronization between an HTTP proxy and the model backend. The fixes were rolled out for all proxies in front of impacted models by 2025-09-28. Users do not need to take any action...

PT-2025-43062

Name of the Vulnerable Software and Affected Versions versions prior to 2025-09-28 Description A desynchronization issue exists between an HTTP proxy and the model backend. This affects communication within the model backend. Approximately 10,000 devices worldwide are potentially affected. The...

The vulnerability of the email_err_data configuration on the Squid proxy server allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the emailerrdata configuration on the Squid proxy server is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

Google Cloud Vertex AI API 安全漏洞

Google Cloud Vertex AI API is a set of interfaces for machine learning platforms from Google, Inc USA. A security vulnerability exists in the Google Cloud Vertex AI API that stems from an unsynchronized connection between the HTTP proxy and the model backend...

TencentOS Server 3: httpd:2.4 (TSSA-2025:0816)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0816 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-62763

Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...

BIT-ENVOY-2025-62409 Envoy allows large requests and responses to cause TCP connection pool crash

Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is...

CVE-2025-62763

Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...

EUVD-2025-35204

Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...

CVE-2025-62763

CVE-2025-62763 affects Zimbra Collaboration (ZCS) before 10.1.12. The root cause is a misconfiguration of the chat proxy that enables SSRF. The CVSS base metrics indicate a Network attack with Low complexity, Privileges Required: Low, and no user interaction, with partial impact on integrity. The...

CVE-2025-62763

Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...

UBUNTU-CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

Updated quictls packages with two security issues and bug fixes

Two security issues and miscellaneous minor bug fixes. Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. CVE-2025-9230 Fix Out-of-bounds read in HTTP client noproxy handling. CVE-2025-9232...

CLSA-2025-1760711358 Fix CVE(s): CVE-2024-38474, CVE-2024-38475

SECURITY UPDATE: modrewrite proxy handler substitution and prefixstat vulnerabilities - debian/patches/CVE-2024-38474-38475-.patch: tighten up prefixstat and %3f handling, add better question mark tracking to avoid UnsafeAllow3F - CVE-2024-38474, CVE-2024-38475...

JLSEC-2025-166 `gio/gsocks4aproxy.c` in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0' character...

Squid vulnerable to information disclosure via authentication credential leakage in error handling

...

Exploit for Observable Discrepancy in Openbsd Openssh

Advanced Exploit Finder A comprehensive penetration testing t...

CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

CVE-2025-62168 Squid vulnerable to information disclosure via authentication credential leakage in error handling

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...