Linux Distros Unpatched Vulnerability : CVE-2026-90678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QU...

CVE-2025-67733

RESP协议注入概念验证 演示通过Valkey/Redis中的Lua脚本错误消息进行的RESP协议注入漏洞的概念验证。 文件 backend.py Flask后端模拟一个使用共享Valkey连接（连接池）的Web应用程序。 端点： 方法| 端点| 描述 ---|---|--- POST| /api/user/role| 设置用户角色 GET| /api/user/role| 获取用户角色 POST| /api/process| 执行Lua脚本 用法： root@kitploit: python backend.py password 示例 python backend.py...

CVE-2026-90678

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...

CVE-2026-90678

HAProxy 3.3.0 through 3.4.4 and 3.5-dev1 through 3.5-dev5 are affected by an HTTP request smuggling vulnerability in the HTTP/3 (QUIC) multiplexer . When an HTTP/3 request with no Content-Length header is forwarded to an HTTP/1.1 backend using chunked transfer coding on a reused connection, the d...

CVE-2025-29927

CVE-2025-29927 Next.js CVE-2025-29927 用の非同期 Python スキャナー。aiohttp と aiofiles を使用して、大規模な URL リストを効率的に処理し、脆弱性を検出して結果を保存します。接続プーリング、キャッシュ、チャンク処理による高速パフォーマンスを特長としています。...

propox

Propox 🛡️🚀 Propox 是一个高性能、安全且可观测的 HTTP/HTTPS 代理，使用 Rust 编写。它旨在处理高吞吐量流量，同时通过高级安全机制主动防御恶意客户端。 ✨ 主要特性 🚀 极致性能 优化并发 ：基于 Tokio 和 Hyper 实现非阻塞 I/O。 无锁状态 ：使用 DashMap 消除热路径上的锁竞争。 连接池 ：复用后端 TCP 连接（Keep-Alive）。 基准测试 ： 标准模式 ：14,000 RPS（每秒请求数）。 基准测试模式 ：28,000 RPS（原始吞吐量）。 🛡️ 主动防御系统 Propox 不仅仅转发流量，它还保护您的后端： 1. 速率限制...

Linux Distros Unpatched Vulnerability : CVE-2026-82053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user...

CVE-2026-82053 Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

EUVD-2026-72940

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

EUVD-2026-72167

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

curl: CVE-2026-80229: OpenSSL provider use-after-free

Summary When CURLOPTSSLENGINE is set e.g. "default" on OpenSSL 3.x, osslsetprovider line 1791 allocates a per-handle OSSLLIBCTX and stores it in data-state.libctx. During TLS connection setup, SSLCTXnewex line 3750 receives this library context and embeds a pointer to it inside the newly created...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

EulerOS 2.0 SP11 : curl (EulerOS-SA-2026-3063)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

[SECURITY] Fedora 43 Update: python-urllib3-2.7.0-2.fc43

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...

[SECURITY] Fedora 44 Update: python-urllib3-2.7.0-1.fc44

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...

PGBouncer: Connection Pooling for Managed PostgreSQL Databases

Learn how enabling PGBouncer reduces connection overhead, frees up server resources for query execution and disk caching, and improves performance at scale...

[SECURITY] Fedora 43 Update: python-urllib3-2.6.3-1.fc43

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...

[SECURITY] Fedora 43 Update: python-urllib3-2.6.1-1.fc43

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...