trawl

TRAWL 欢迎 使用 TRAWL！👋 面向应用程序和 AI 代理的自托管网页抓取工具。通过原生 API 获取页面，或连接 MCP 客户端来读取干净的 Markdown、提取结构化数据、捕获截图并检查浏览器活动。 TRAWL 从快速的 HTTP 请求开始，复用已解决的浏览器会话，并在网站需要更多处理时升级到 Camoufox 和可选的住宅代理。它处理受支持的 JavaScript 挑战和 CAPTCHA，并提供一个本地仪表板，让你查看哪些请求成功、失败以及耗时情况。 对于现有的 FlareSolverr 用户，兼容的 /v1 端点可与 Prowlarr 及其他 arr...

react2shell_analyzer

React2Shell Analyzer Next.jsサーバーとブラウザ/PoC間のNext.js Server Actionsトラフィックを検査するための強力なHTTPプロキシアナライザ。 GitHub リポジトリ https://github.com/Benrich127N/react2shellanalyzer.git 機能 🔍 ヘッダー検査 : すべてのリクエストおよびレスポンスヘッダーを記録 📦 マルチパート分析 : マルチパートフォームセクションを解析して表示 ⚠️ パターン検出 : 疑わしいパターンを特定: React Flightトークン $@, $K:...

Roxy

Roxy 极简的基于终端的 HTTP/HTTPS 拦截代理。 https://github.com/user-attachments/assets/94f9c9ae-5842-4b19-9f5b-84dedb9430e6 功能 · 安装 · HTTPS 支持 · 用法 · 工作原理 概述 Roxy 是一个轻量级的 HTTP 和 HTTPS 拦截代理，带有用 Rust 编写的终端用户界面（TUI）。 它能在请求到达服务器之前，从你的终端内实时捕获、检查并修改请求。 可以把它看作是一个极简的、终端原生的 Burp Suite 替代品，用于日常流量分析。 功能 HTTP 拦截 —...

CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

Rocky Linux 9 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_54487)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654487 advisory. FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files CVE-2026-64624 FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message...

Rocky Linux 8 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_54485)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654485 advisory. FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files CVE-2026-64624 FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message...

CentOS Linux 7 [TuxCare] Security Update: libsoup / libsoup-devel (CENTOS7:CLSA-2026:1777035141)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777035141 advisory. - A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in...

CentOS Linux 6 [TuxCare] Security Update: curl / libcurl / libcurl-devel (CENTOS6:CLSA-2026:1774276586)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1774276586 advisory. - curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for th...

Rocky Linux 10.2 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_54486)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654486 advisory. FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow CVE-2026-64620 FreeRDP: FreeRDP: Double-free vulnerability...

Security Bulletin: Vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer. Vulnerabilities include a crafted Host header that is only a superstring match for a configured host+path key can still route a...

curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker...

Important: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in http-proxy-middleware

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in http-proxy-middleware in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-55602 DESCRIPTION: http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0,...

PT-2026-99949

Name of the Vulnerable Software and Affected Versions Axios versions 1.15.0 through 1.19.x Description A denial of service can occur when HTTP PROXY or HTTPS PROXY is configured, NO PROXY or no proxy is non-empty, and redirects are followed. The issue arises when a crafted redirect Location...

TencentOS Server 2: freerdp (TSSA-2026:1042)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1042 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2026-85124

A flaw was found in @fastify/http-proxy. This component, designed to proxy HTTP requests, does not correctly validate incoming request paths, specifically failing to account for backslash-based dot-segments. An unauthenticated network attacker can exploit this vulnerability to bypass the proxy's...

CVE-2026-85720

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a request using an HTTP proxy to reach an HTTPS origin can expose preemptive origin credentials because NettyRequestFactory and...

USN-8780-1 libsoup2.4, libsoup3 vulnerabilities

It was discovered that libsoup incorrectly handled certain URLs when using an HTTP proxy. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. CVE-2026-1467 It was discovered that libsoup did not remove proxy authentication credentials when following HTTP redirects. A...

USN-8780-1: libsoup vulnerabilities

It was discovered that libsoup incorrectly handled certain URLs when using an HTTP proxy. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. CVE-2026-1467 It was discovered that libsoup did not remove proxy authentication credentials when following HTTP redirects. A...

CVE-2026-85720: Cleartext Transmission of Sensitive Information

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a request using an HTTP proxy to reach an HTTPS origin can expose preemptive origin credentials because NettyRequestFactory and...