98 matches found
propox
Propox 🛡️🚀 Propox is a high-performance, secure, and observable HTTP/HTTPS proxy written in Rust. It is designed to handle high-throughput traffic while actively defending against abusive clients using advanced security mechanisms. ✨ Key Features 🚀 Extreme Performance Optimized Concurrency : Built...
CVE-2025-67733
PoC de inyección de protocolo RESP Prueba de concepto que demuestra la vulnerabilidad de inyección de protocolo RESP mediante mensajes de error de scripts Lua en Valkey/Redis. Archivos backend.py Backend Flask que simula una aplicación web con conexión Valkey compartida pool de conexiones...
CVE-2025-29927
CVE-2025-29927 Escáner asíncrono en Python para Next.js CVE-2025-29927. Utiliza aiohttp & aiofiles para procesar de manera eficiente grandes listas de URL, detectar vulnerabilidades y guardar resultados. Incluye pool de conexiones, almacenamiento en caché y procesamiento por fragmentos para un...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...
Linux Distros Unpatched Vulnerability : CVE-2026-90678
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QU...
UBUNTU-CVE-2026-90678
An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...
CVE-2026-90678
An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...
CVE-2026-90678
HAProxy 3.3.0 through 3.4.4 and 3.5-dev1 through 3.5-dev5 are affected by an HTTP request smuggling vulnerability in the HTTP/3 (QUIC) multiplexer . When an HTTP/3 request with no Content-Length header is forwarded to an HTTP/1.1 backend using chunked transfer coding on a reused connection, the d...
Linux Distros Unpatched Vulnerability : CVE-2026-82053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user...
EUVD-2026-72940
A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...
CVE-2026-82053 Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment
A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...
PT-2026-87146
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A security issue in the LDAP authorization integration allows pooled LDAP connections to retain stale authentication identities under specific configurations. This causes subsequent...
EUVD-2026-72167
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
curl: CVE-2026-80229: OpenSSL provider use-after-free
Summary When CURLOPTSSLENGINE is set e.g. "default" on OpenSSL 3.x, osslsetprovider line 1791 allocates a per-handle OSSLLIBCTX and stores it in data-state.libctx. During TLS connection setup, SSLCTXnewex line 3750 receives this library context and embeds a pointer to it inside the newly created...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...
EulerOS 2.0 SP11 : curl (EulerOS-SA-2026-3063)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...