Espionage

Espionage - Un Interceptor de Tráfico de Red para Linux Destacado en Acerca de Espionage Espionage es un sniffer de paquetes de red que intercepta grandes cantidades de datos que se transmiten a través de una interfaz. La herramienta permite a los usuarios ejecutar análisis de tráfico normal y...

apk-interceptor

apk-interceptor Android deeplink, Intent, and WebView bridge assessment helper apk-interceptor is a portable Android testing APK for authorized application security assessments. It helps security engineers verify how an Android app handles external entry points such as custom URI schemes,...

undici: undici: Integrity failure due to caching of unsafe HTTP method responses

A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...

undici: Undici: Response truncation and connection termination

A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...

undici: undici: HTTP response splitting via retry interceptor

A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...

CVE-2026-85008

A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...

CVE-2026-18540

A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...

Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. id: CVE-2026-34486 info: name: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote...

CVE-2026-84890

undicis decompress interceptor decompresses response bodies according...

UBUNTU-CVE-2026-18540

undicis retry interceptor can append the body of a ranged retry respo...

UBUNTU-CVE-2026-84947

undicis dump interceptor reads and discards a response body up to a c...

CVE-2026-84933

undicis cache interceptor does not handle the Set-Cookie response hea...

UBUNTU-CVE-2026-85008

undicis cache interceptor documents that only safe HTTP methods are c...

UBUNTU-CVE-2026-84933

undicis cache interceptor does not handle the Set-Cookie response hea...

CVE-2026-85008

undicis cache interceptor documents that only safe HTTP methods are c...

CVE-2026-84947

undicis dump interceptor reads and discards a response body up to a c...

UBUNTU-CVE-2026-84890

undicis decompress interceptor decompresses response bodies according...

cve-2026-34486-tomcat_encrypt_bypass_reproduction

CVE-2026-34486: Apache Tomcat EncryptInterceptor Bypass...

Interceptor

Interceptor Author: @Cerbersec Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space by patching kernel callbacks and hooking IRPs. Interceptor was made as part of an internship at NVISO Security's Red Team. The associated blogposts can be found here kernel...

Linux Distros Unpatched Vulnerability : CVE-2026-18540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the...