cve-2022-22965

Spring4Shell - CVE-2022-22965 ビルド リポジトリをクローンし、コンテナをビルドして実行しましょう。 root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc ブラウザで...

burpa

burpa: Burp 자동화 도구 Burp Suite 자동화 도구 요구 사항 burp-rest-api Burp Suite Professional slackclient 사용법 root@kitploit: $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT -aP...

CVE-2026-90454

A read-only deployment mode for a product with a bundled packet-analysis component (per the CISA ICS-CERT advisory reference) uses a pattern-based deny list to block write-capable routes, but the pattern omits routes that modify tags on stored session records . Since the proxy otherwise permits t...

CVE2026-42926

CVE-2026-42926 NGINX HTTP/2 フレームインジェクションラボ CVE-2026-42926 に関連する挙動を検証・比較するための、管理されたサイバーセキュリティラボです。この問題は、脆弱なプロキシ構成が使用されている場合に特定の NGINX バージョンへ影響する HTTP/2 フレームインジェクション です。 このリポジトリは、防御的研究、パッチ検証、構成監査、および管理されたラボ環境での再現のみ を目的としています。 分類: HTTP/2 フレームインジェクション 影響を受けるバージョン: NGINX 1.29.4 〜 1.30.0 修正済みバージョン: NGI...

webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration

A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket ws: true forwarding, the development server's own Hot Module Replacement HMR WebSocket can be intercepted. This interception leads to the leakage of the browser's cookie...

autochrome

autochrome このツールは、新しいChromiumをダウンロード、インストール、設定します。 以下のような便利な機能が含まれています: あの煩わしい自動更新機能をすべてオフにします! 視認性の高いカラフルなテーマ! XSS監査機能なし! 自動プロキシ設定! 127.0.0.1:8080 を使用 TLS証明書を検証しないため表示される迷惑なインフォバー! 同梱のBurp拡張機能をインストールすれば、Burpとの基本的な連携が可能 現在、以下のOSがサポートされています: macOS 10.9 Mavericks 以降 Ubuntu 16.04 およびその他のXDG対応Linux...

webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration

A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket ws: true forwarding, the development server's own Hot Module Replacement HMR WebSocket can be intercepted. This interception leads to the leakage of the browser's cookie...

PT-2026-89695

Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...

CVE-2022-35914

CVE-2022-35914バッチ検出ツール target.txtファイルを作成し、検出するURLをインポートしてから、バッチ検出を開始できます。 エラーが発生した場合はプロキシを無効にしてください。...

EUVD-2026-74627

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration...

CVE-2026-21086

CVE-2026-21086 is an improper authorization vulnerability in the ProxyHandler component of Samsung Mobile devices prior to SMR Aug-2026 Release 1 . A local attacker with low privileges can access the proxy configuration. The Samsung Mobile CNA assigned a CVSS 4.0 base score of 4.8 (MEDIUM) with a...

BIT-ELASTICSEARCH-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

EUVD-2026-69568

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

Astra Linux – Vulnerability in libproxy

In libproxy, the url.cpp module in version 0.4.15 is vulnerable to a buffer overflow when PAC is enabled. This vulnerability was confirmed by using a large PAC file that was sent without a Content-length header...

EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-2962)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTPS request after a Negotiate-authenticated one,...

CVE-2026-64649 Next.js: Server-Side Request Forgery in Server Actions on Custom Servers

Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host Server-Side Request Forger...

Linux Distros Unpatched Vulnerability : CVE-2026-12547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority host:port. When the proxy configuration changes e.g., via...

Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

Summary Axios’ Node.js HTTP adapter can route requests through an attacker-controlled proxy when Object.prototype.proxy is polluted and request configuration is materialized as a regular object before dispatch. Recent axios releases harden merged request config by creating a null-prototype object...

MAL-2026-10759 Malicious code in ryry-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a305ba94c92b6ec62aaf627fc1213d9e37e1645f37fd033f61c7becaba71edd ryry-cli runs as a long-lived agent that connects to a hardcoded WebSocket at wss://api.dalipen.com/aigc/task/connect and executes Python scripts und...