Lucene search
+L

75 matches found

Kitploit
Kitploit
added 2026/09/12 6:02 a.m.8 views

BurpSuite-Team-Extension

BurpSuite-Team-Extension 이 Burpsuite 플러그인은 여러 테스터가 라이브/기록된 프록시 요청, 스코프, Repeater/Intruder 페이로드를 실시간으로 서로 공유할 수 있게 하여 진정한 협업 웹 애플리케이션 테스트를 가능하게 합니다. Team Server에 연결되고 Team Room에 참여하면 Burp 클라이언트를 통해 들어오는 모든 요청이 방에 있는 다른 테스터와 공유되며, 그 반대의 경우도 마찬가지입니다. 클라이언트에서 대상으로의 요청이 다른 클라이언트로 전파됨 대상에서 클라이언트로의 응답이 ...

5.9AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 6:33 p.m.15 views

EUVD-2026-42930

9router: Unauthenticated /v1 proxy access via Host-header spoofing → open AI relay + SSRF...

8.2CVSS5.9AI score0.00323EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/02 12:03 a.m.28 views

Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests

A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery SSRF through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or...

8.6CVSS6AI score0.38872EPSS
SaveExploits11References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:33 p.m.18 views

CVE-2026-45577

Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public reverse-proxied requests as local when the app receives them over a loopback socket and no Bearer token is present. In affected deployments, the REST auth middleware can resolv...

6.9CVSS5.4AI score0.00249EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/05/22 2:20 a.m.20 views

SUSE CVE-2026-41999

Incorrect Behaviour of Views with TCP PROXY Requests...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/21 10:16 a.m.17 views

CVE-2026-41999

Incorrect Behaviour of Views with TCP PROXY Requests...

4.8CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/21 9:27 a.m.36 views

CVE-2026-41999

Technical details are not publicly available in the provided documents. Monitor for updates.

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/21 9:27 a.m.30 views

CVE-2026-41999 Incorrect Behaviour of Views with TCP PROXY Requests

Incorrect Behaviour of Views with TCP PROXY Requests...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 9:27 a.m.9 views

CVE-2026-41999

Incorrect Behaviour of Views with TCP PROXY Requests...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/05/21 9:27 a.m.22 views

EUVD-2026-31262

Incorrect Behaviour of Views with TCP PROXY Requests...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/21 9:27 a.m.13 views

CVE-2026-41999 Incorrect Behaviour of Views with TCP PROXY Requests

Incorrect Behaviour of Views with TCP PROXY Requests...

4.8CVSS5.9AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2026/05/21 9:27 a.m.19 views

CVE-2026-41999

Incorrect Behaviour of Views with TCP PROXY Requests...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/21 12:00 a.m.16 views

PT-2026-42445

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Incorrect behavior occurs within Views when processing TCP PROXY requests. Recommendations At the moment, there is no information about a newer version that...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References16
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.24 views

PowerDNS Authoritative 访问控制错误漏洞

PowerDNS Authoritative is a DNS server software developed by PowerDNS Corporation. PowerDNS Authoritative has a vulnerability related to access control, which stems from incorrect behavior in the view of TCP PROXY requests...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/28 12:00 a.m.22 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.31 contained security vulnerabilities. These vulnerabilities stemmed from the incorrect classification of proxy remote requests as loop connections, which could allow attackers ...

6.3CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/09 5:46 p.m.45 views

CVE-2026-29023 Keygraph Shannon Hard-coded Router API Key

Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...

7.3CVSS0.00243EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/09 5:46 p.m.5 views

CVE-2026-29023

Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...

7.3CVSS5.7AI score0.00243EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/03/09 5:46 p.m.9 views

CVE-2026-29023 Keygraph Shannon Hard-coded Router API Key

Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...

7.3CVSS5.7AI score0.00243EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/09 12:00 a.m.23 views

Shannon 信任管理问题漏洞

Shannon is an open-source white-box penetration testing tool developed by KeygraphHQ. Shannon has a vulnerability related to trust management, which stems from hardcoded API keys in router configurations. This vulnerability could allow unauthenticated attackers to make proxy requests and...

7.3CVSS5.8AI score0.00243EPSS
SaveExploits0References4
NVD
NVD
added 2026/01/16 1:16 p.m.21 views

CVE-2026-0612

The Librarian contains a information leakage vulnerability through the webfetch tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions ...

7.5CVSS0.00356EPSS
SaveExploits0References2
Rows per page
Query Builder