The vulnerability of proxy servers with advanced web content filtering functions like Privoxy arises from insufficient validation of input data, allowing attackers to trigger service interruptions.

The vulnerability of a proxy server with extended filtering functions for web content, such as Privoxy, is related to insufficient validation of input data in the “processencryptedrequestheaders” function. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2012-0832

Malware in sbrugna...

EUVD-2007-1193

Malware in sbrugna...

EUVD-2006-3421

Malware in sbrugna...

EUVD-2015-1370

Malware in sbrugna...

EUVD-2010-0674

Malware in sbrugna...

EUVD-2006-2783

Malware in sbrugna...

EUVD-2015-3234

Malware in sbrugna...

CVE-2025-58584 Plain Text Transmission of Username and Password in the URL

In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...

EUVD-2024-38546

Malicious code in bioql PyPI...

EUVD-2025-23314

Malicious code in bioql PyPI...

The vulnerability of the NVIDIA Omniverse Launcher, a platform for working with 3D graphics, relates to the disclosure of information through registration files, allowing an intruder to disclose protected information.

The vulnerability of the NVIDIA Omniverse Launcher, a platform for working with 3D graphics, is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information by using proxy servers...

NVIDIA Omniverse Launcher < 1.9.19 Information Disclosure

The version of NVIDIA Omniverse Launcher installed on the remote host is prior to 1.9.19. It is, therefore, affected by a vulnerability. NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to t...

CVE-2025-23289

NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to the log files through proxy servers. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2025-23289

NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to the log files through proxy servers. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2025-23289: Insertion of Sensitive Information into Log File

NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to the log files through proxy servers. A successful exploit of this vulnerability might lead to information disclosure...

PT-2025-31586 · Nvidia · Nvidia Omniverse Launcher

Name of the Vulnerable Software and Affected Versions: NVIDIA Omniverse Launcher for Windows and Linux affected versions not specified Description: NVIDIA Omniverse Launcher for Windows and Linux contains an issue in the launcher logs. A user can cause sensitive information to be written to log...

Creating Scripts to Identify Vulnerable Proxy Servers

This whitepaper covers how to create Nmap scripts to identify banners and versions of proxy servers. It also covers methods to mitigate the public visibility of banners and version information on proxy servers. Written in Portuguese...

PT-2025-11679 · Openresty +1 · Lua-Nginx-Module +2

Name of the Vulnerable Software and Affected Versions: OpenResty/lua-nginx-module affected versions not specified Description: The issue concerns HTTP Request Smuggling in HEAD requests. When handling HTTP/1.1 requests, the lua-nginx-module incorrectly parses HEAD requests with a body, treating t...

CVE-2024-48874: Server-Side Request Forgery (SSRF)

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal services used by Ruijie and their internal cloud infrastructure via AWS cloud...