squid

SQUID Cache del proxy web http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation e i contributori Il software Squid è distribuito sotto licenza GPLv2+ e include contributi di numerosi individui e organizzazioni. Si prega di consultare i file COPYING e CONTRIBUTORS per i...

CVE-2016-2569

Ciao a tutti, Grazie per aver letto il mio primo post sul blog. Oggi parleremo della creazione di un exploit per uno degli strumenti open-source, il server proxy di caching Squid. Quindi, cos'è Squido? Squid è un proxy di caching per il Web che supporta HTTP, HTTPS, FTP e altro. Riduce la larghez...

squidmagic

Squidmagic ist ein Werkzeug zur Analyse von webbasiertem Netzwerkverkehr, um zentrale Command-and-Control-Server C&C und schädliche Websites zu erkennen, unter Verwendung des Squid-Proxy-Servers und Spamhaus. Abhängigkeiten installieren pip install -r requirements.txt Verwendung python...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Pufferüberlauf Sicherheitslücke im Squid-Proxy gefunden. CVE-2025-54574 — Kritischer Heap-Pufferüberlauf im Squid-Proxy Dieses Repository dokumentiert den Entdeckungs-, Analyse- und verantwortungsvollen Offenlegungsprozess von CVE-2025-54574, einem kritischen...

Squid Proxy - HTTP Authentication Credentials Disclosure

Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...

CVE-2026-61642

A flaw was found in Squid. Due to improper handling of HTTP/1.1 Transfer-Encoding headers, a trusted client can perform an HTTP request smuggling attack, interfering with how web requests are processed. This vulnerability allows an attacker to bypass intermediate security controls. When an HTTP...

CVE-2018-19131

Demo di CVE-2018-19131 Autore: Jonathan M. Wilbur Anno di copyright: 2018 Licenza: MIT License Non fare nulla di illegale con questo. Non è malware. È solo una dimostrazione di concetto. Questa è una demo di CVE-2018-19131, che gira in un'app Docker Compose. Questa libreria compila la versione...

CVE-2025-62168

CVE-2025-62168 Offenlegung von Informationen im Squid-Proxy bei der Fehlerbehandlung Scanner Erkennung & PoC „Aufgrund einer fehlenden Schwärzung von HTTP-Authentifizierungsdaten ist Squid anfällig für einen Angriff zur Offenlegung von Informationen. Schweregrad: Dieses Problem ermöglicht es eine...

CVE-2025-62168

CVE-2025-62168 Divulgazione di informazioni di Squid Proxy nella gestione degli errori Scanner Rilevamento & PoC "A causa di un errore nella rimozione delle credenziali di autenticazione HTTP Squid è vulnerabile a un attacco di divulgazione di informazioni. Gravità: Questo problema consente a uno...

CVE-2025-62168

CVE-2025-62168 — PoC per la perdita di token in Squid Proxy L'autore non si assume alcuna responsabilità per usi impropri o danni causati da questo strumento. La ricerca è fornita esclusivamente a scopo educativo e difensivo. Descrizione Questo repository contiene un Proof-of-Concept PoC per...

Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server

Description: This update fixes the following issues: Release notese highlights: Added a note about the SUSE Registry IP address change. Update to SUSE Multi-Linux Manager 5.2.1 Security issues Fixed: CVE-2026-39821 Bugs mentioned bsc1208800, bsc1230568, bsc1230949, bsc1258382, bsc1266481...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ L'antico cugino di Heartbleed, nascosto in Squid dal 1997. ✨ Caratteristiche PoC in un unico file — Zero dipendenze Server FTP malevolo che imita il banner NetWare + risposta LIST troncata Rilevamento e decodifica in tempo reale di token Basic Auth + Bearer Heap...

Astra Linux – Vulnerability in Squid

A issue was discovered in Squid 4.x before 4.15, and in 5.x before 5.0.6. If a remote server sends a certain response header via HTTP or HTTPS, it can lead to a denial of service. This header can potentially appear in legitimate network traffic...

Astra Linux – Vulnerability in Squid

Squid encounters issues with the improper handling of ASN.1 encoding for long SNMP OIDs in version 7.1. This issue occurs in the asnbuildobjid function within lib/snmplib/asn1.c...

Astra Linux – Vulnerability in Squid

A vulnerability was discovered in Squid before versions 4.15 and 5.x before version 5.0.6. Due to incorrect parser validation, this vulnerability allows for a Denial of Service attack against the Cache Manager API. This enables a trusted client to trigger memory leaks, which over time can lead to...

squid-7.7-2.1 on GA media (moderate)

squid-7.7-2.1 on GA media Announcement ID: openSUSE-SU-2026:11937-1 Rating: moderate Cross-References: CVE-2026-33515 CVE-2026-47729 CVE-2026-50012 CVSS scores: CVE-2026-33515 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2026-33515 SUSE : 8.7...

Blackash-CVE-2025-54574

🛑 CVE-2025-54574 — Overflow del buffer heap in Squid ≤ 6.3 🛑 Gravità: Critica CVSS 9.3 Software interessato: Squid Proxy versioni 6.3 e precedenti Tipo di vulnerabilità: Overflow del buffer basato su heap Rilevata in: elaborazione URN Uniform Resource Name Impatto: Possibile esecuzione di codice ...

Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing

The EU is recommending import controls to combat unregulated squid fishing in the Southwest Atlantic. I'm not optimistic. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

ROS-20261001-73-0002

The vulnerability of the strchr function in the Squid proxy server is related to the escape from memory buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

Rocky Linux 9 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource (crlsa-2022_6839)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226839 advisory. squid: buffer-over-read in SSPI and SMB authentication CVE-2022-41318 Tenable has extracted the preceding description block directly from the CIQ security advisory...