atlantis-android

Atlantis Android Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging. Overview Atlantis Android is a companion library to Proxyman that allows you to capture and inspect network traffic from your Android applications without configuring a proxy or installing...

certPinningVulnerableOkHttp

OkHttp simple-client app vulnerable to CVE-2016-2402 This is a fork of the default simple-client from the okhttp project. Simple-client is a Java app that just does a GET request to https://api.github.com and fetches the names of okhttp's contributors. This fork has been edited so that OkHttp 3.0...

frida-ssl-bypass

🔓 Frida SSL Pinning Bypass Universal SSL/TLS Certificate Pinning Bypass for Android Author: Danieldev GitHub: @danieldev23 | Telegram: @zadevz A comprehensive Frida toolkit that defeats SSL pinning on any Android app — covering both Java and Native layers, from standard OkHttp pinning to Facebook...

CVE-2026-111720 fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

CVE-2026-111720 fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

CVE-2026-111720

The fish-island-backend software (specifically versions through commit 7c61b78 ) is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) vulnerability. This flaw exists in the GET /api/web/parse endpoint, where the application fails to properly validate the url parameter. Remote at...

CVE-2026-111720 fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

PT-2026-116119

🚨 CVE-2026-111720 fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopbac...

CVE-2026-111720: Server-Side Request Forgery (SSRF)

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

lhccong fish-island-backend server-side request forge vulnerability

The lhccong fish-island-backend has a vulnerability related to server-side request forgeing. This vulnerability stems from the lack of validation on the URL parameters of the GET /api/web/parse interface. It exposes the system to attacks involving server-side request forgeing. Attackers can use...

ROOT-APP-MAVEN-CVE-2021-0341 CVE-2021-0341 in com.squareup.okhttp3:okhttp - Patched by Root

Root has patched CVE-2021-0341 in the com.squareup.okhttp3:okhttp package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-HM98634 OkHttp before 2

Security vulnerability affects the apache-hive package. OkHttp before 2...

CLEANSTART-2026-KK42580 flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value

Security vulnerability affects the spark-sc212-jdk17-py311 package. A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value...

PT-2026-108447

Security vulnerability affects the spark-sc212-jdk17-py311 package. A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value...

org.http4k:http4k-aws (3.202.0), org.http4k:http4k-client-apache (3.202.0) +32 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.202.0)

org.http4k:http4k-core MAVEN version 3.202.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.202.0 - org.http4k:http4k-client-apache 3.202.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.102.0), org.http4k:http4k-client-apache (3.102.0) +18 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.102.0)

org.http4k:http4k-core MAVEN version 3.102.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.102.0 - org.http4k:http4k-client-apache 3.102.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.122.0), org.http4k:http4k-client-apache (3.122.0) +30 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.122.0)

org.http4k:http4k-core MAVEN version 3.122.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.122.0 - org.http4k:http4k-client-apache 3.122.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.36.1), org.http4k:http4k-client-apache (3.36.1) +20 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.36.1)

org.http4k:http4k-core MAVEN version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.36.1 - org.http4k:http4k-client-apache 3.36.1 - org.http4k:http4k-client-apache-async 3.36...

org.http4k:http4k-aws (3.114.0), org.http4k:http4k-client-apache (3.114.0) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.114.0)

org.http4k:http4k-core MAVEN version 3.114.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.114.0 - org.http4k:http4k-client-apache 3.114.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.21.1), org.http4k:http4k-client-apache (3.21.1) +24 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.21.1)

org.http4k:http4k-core MAVEN version 3.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.21.1 - org.http4k:http4k-client-apache 3.21.1 - org.http4k:http4k-client-apache-async 3.21...