HAProxy-Keepalived-Sec-HighLoads

HAProxy and Keepalived LoadBalancer+Cluster+Sec+HighLoads Installation and Configuration HAProxy is an open-source software that provides a proxy server service for TCP and HTTP based applications with high availability load balancing. Keepalived is an open-source software capable of providing IP...

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

cnc-relay

cnc-relay During a red team exercise it's common to set up a relaying infrastructure to seperate your external facing footprint from the actual command and control backend. Some of the popular light-weight options are to set up either HAProxy or NGINX on disposable cloud infrastructure and proxy...

HAProxy-CVE-2023-45539-PoC

HAProxy-CVE-2023-45539-PoC HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server. What gets misroute...

CVE-2021-40346-POC

CVE-2021-40346-POC CVE-2021-40346 integer overflow enables http smuggling Integer overflow leading to HTTP request smuggling Chinese analysis: HAProxy Request Smuggling Vulnerability CVE-2021-40346 Analysis Reference:...

CVE-2021-40346

CVE-2021-40346 — HAProxy Integer Overflow leading to HTTP Request Smuggling Vulnerability Summary HAProxy is an open-source reverse proxy and load balancer that handles load distribution and ACL access control rules processing. CVE-2021-40346 is an ACL bypass vulnerability that occurs when HAProx...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP Request Smuggling - ACL Bypass Overview This project demonstrates CVE-2021-40346 , a critical integer overflow vulnerability in HAProxy that enables HTTP Request Smuggling attacks to bypass security controls. CVSSv3 Score: 7.5 High Contributors: 1. Boian Eduard 2...

HTTP3ONSTEROIDS

Table of contents Vulnerability Description Source Code Review Lab Setup Identifying the issue References Vulnerability Description HAProxy's HTTP/3 implementation fails to block a malformed HTTP header field name , and when deployed in front of a server that incorrectly process this malformed...

HAProxy_CVE-2021-40346

HAProxyCVE-2021-40346 HAProxy CVE-2021-40346 Writeup Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2026-33555

HTTP Request Smuggling via HAProxy H3/QUIC Standalone FIN Body Validation Bypass Full post here : https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Summary A vulnerability in HAProxy's HTTP/3 implementation allows an attacker to send an HTTP request with a...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

CVE-2026-78122-POC

CVE-2026-78122 — Proof of Concept Tecnativadocker-socket-proxy ≤ 0.5.0 — Insufficient Access-Control Granularity CWE-1220 CVSS 4.0: 8.3 High — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N Attack Vector is Adjacent AV:A: the attacker needs local/adjacent network reach to the pro...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling For educational purposes only Setup $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 Test Confirm /admin is denied. $ curl...

Loadbalancer.org ADC deployment template injection RCE

Config-group Basic auth POST to /lbadmin/config/deployment/index.php with base64 deployment JSON injects into haproxy reload sudo NOPASSWD. !/usr/bin/env python3 -- coding: utf-8 -- """Loadbalancer.org ADC deployment template command injection root.""" from future import annotations import base64...

CVE-2021-40346

CVE-2021-40346 Integer overflow on header request internal representation allows HTTP request smuggling. This repository presents a PoC built with docker-compose using two docker images: one with a vulnerable version of HaProxy in this case 2.2.16 and one with a Flask web server using Gunicorn as...

Security Bulletin:Vulnerability in netty-codec-haproxy may affect IBM Infosphere Change Data Capture (CVE-2026-93564)

Summary A security vulnerability has been identified in netty-codec-haproxy, Netty/Codec/HAProxy. netty-codec-haproxy is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...

openSUSE 16 Security Update : haproxy (openSUSE-SU-2026:22162-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22162-1 advisory. This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line bsc1285046. Changes for haproxy: - Otel Updat...

Security update for haproxy (moderate)

openSUSE security update: security update for haproxy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22162-1 Rating: moderate References: bsc1285046 Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------...

UBUNTU-CVE-2026-110353

HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service worker-thread CPU exhaustion via a truncated HTTP/2 PING frame. h2chandleping in src/muxh2.c does not check for a short read, unlike the other H2 frame handlers. Because the incomplete frame cannot be...

UBUNTU-CVE-2026-110354

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...