75 matches found
BurpSuite-Team-Extension
BurpSuite-Team-Extension 이 Burpsuite 플러그인은 여러 테스터가 라이브/기록된 프록시 요청, 스코프, Repeater/Intruder 페이로드를 실시간으로 서로 공유할 수 있게 하여 진정한 협업 웹 애플리케이션 테스트를 가능하게 합니다. Team Server에 연결되고 Team Room에 참여하면 Burp 클라이언트를 통해 들어오는 모든 요청이 방에 있는 다른 테스터와 공유되며, 그 반대의 경우도 마찬가지입니다. 클라이언트에서 대상으로의 요청이 다른 클라이언트로 전파됨 대상에서 클라이언트로의 응답이 ...
EUVD-2026-42930
9router: Unauthenticated /v1 proxy access via Host-header spoofing → open AI relay + SSRF...
Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests
A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery SSRF through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or...
CVE-2026-45577
Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public reverse-proxied requests as local when the app receives them over a loopback socket and no Bearer token is present. In affected deployments, the REST auth middleware can resolv...
SUSE CVE-2026-41999
Incorrect Behaviour of Views with TCP PROXY Requests...
CVE-2026-41999
Incorrect Behaviour of Views with TCP PROXY Requests...
CVE-2026-41999
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-41999 Incorrect Behaviour of Views with TCP PROXY Requests
Incorrect Behaviour of Views with TCP PROXY Requests...
CVE-2026-41999
Incorrect Behaviour of Views with TCP PROXY Requests...
EUVD-2026-31262
Incorrect Behaviour of Views with TCP PROXY Requests...
CVE-2026-41999 Incorrect Behaviour of Views with TCP PROXY Requests
Incorrect Behaviour of Views with TCP PROXY Requests...
CVE-2026-41999
Incorrect Behaviour of Views with TCP PROXY Requests...
PT-2026-42445
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Incorrect behavior occurs within Views when processing TCP PROXY requests. Recommendations At the moment, there is no information about a newer version that...
PowerDNS Authoritative 访问控制错误漏洞
PowerDNS Authoritative is a DNS server software developed by PowerDNS Corporation. PowerDNS Authoritative has a vulnerability related to access control, which stems from incorrect behavior in the view of TCP PROXY requests...
OpenClaw 安全漏洞
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.31 contained security vulnerabilities. These vulnerabilities stemmed from the incorrect classification of proxy remote requests as loop connections, which could allow attackers ...
CVE-2026-29023 Keygraph Shannon Hard-coded Router API Key
Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...
CVE-2026-29023
Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...
CVE-2026-29023 Keygraph Shannon Hard-coded Router API Key
Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...
Shannon 信任管理问题漏洞
Shannon is an open-source white-box penetration testing tool developed by KeygraphHQ. Shannon has a vulnerability related to trust management, which stems from hardcoded API keys in router configurations. This vulnerability could allow unauthenticated attackers to make proxy requests and...
CVE-2026-0612
The Librarian contains a information leakage vulnerability through the webfetch tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions ...