proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

Impact proxy-addr determines which network hops are trusted proxies so that X-Forwarded-For can be believed. When an application configures a trust subnet as an IPv4-mapped IPv6 address with a short prefix, such as ::ffff:10.0.0.0/8 the correct spelling is ::ffff:10.0.0.0/104, the subnet compiles...

NPM: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

NPM: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet vulnerability discovered by ? in WordPress Npm proxy-addr versions = 1.1.0, 2.0.8...

GHSA-RVM3-566M-V7FV Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Impact Capacitor's WebView navigation guard validated only the host and scheme of a target URL, not its path. Because the internal HTTP proxy path /capacitorhttpinterceptor is served at the application's own origin, a frame navigation to it was always treated as in-app navigation and allowed...

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Impact Capacitor's WebView navigation guard validated only the host and scheme of a target URL, not its path. Because the internal HTTP proxy path /capacitorhttpinterceptor is served at the application's own origin, a frame navigation to it was always treated as in-app navigation and allowed...

impersonate-proxy

impersonate-proxy English | 日本語 | 简体中文 TLSフィンガープリントJA3/JA4、HTTP/2フィンガープリント、HTTPヘッダーの順序、User-Agent、送信元IPヘッダーを、単一のYAML設定ファイルから制御できるローカルMITMプロキシです。 プロキシを再起動せずにブラウザのツールバーから直接プロキシのON/OFF切り替えやフィンガープリントプロファイルの変更ができる Chrome拡張機能 も同梱しています。 WAFのボット検知システムに対する 許可されたセキュリティテスト...

GHSA-X965-FC75-JPQH vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

Summary vm2 3.11.6 this fork's latest release contains an incomplete-fix bypass of the Error.cause host-reference sanitization added in GHSA-m283-3h24-438v commit 7e3faaf. Sandbox code that catches a host-wrapped AggregateError which is revisited within a single handleException traversal...

CVE-2026-93315

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315

The BuildKit build engine is vulnerable to a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) when using proxy networking with CA injection. A build step can modify the CA bundle before the cleanup process occurs, potentially causing the cleanup to block, execute outside the build root...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

Arti Mobile - Tor in Rust for Android and iOS

Arti Mobile: Android 및 iOS용 Rust 기반 Tor Tor Project가 지원하는 공식 Arti Mobile 라이브러리로, 새로운 Tor Rust 런타임을 모바일 기기에 제공합니다. 이 프로젝트는 Tor Arti의 표준 API를 Android 및 iOS 애플리케이션에 제공하기 위한 공유 프로젝트입니다. 다음 프로젝트를 기반으로 합니다: Trinity의 https://gitlab.torproject.org/trinity-1686a/arti-mobile-example/ uniq의...

osiris

⬡ OSIRIS Open Source Intelligence & Reconnaissance Integrated System A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface. Live Demo · Report Bug ·...

CVE-2026-20896

CVE-2026-20896 Gitea の公式 Docker イメージ1.26.2 までは、デフォルト設定で REVERSEPROXYTRUSTEDPROXIES = を同梱しています。リバースプロキシログインを有効にすると、このワイルドカードによりすべての送信元 IP が信頼できるプロキシとして扱われるため、ポートに到達できる人は誰でも X-WEBAUTH-USER ヘッダーを送信して、任意のユーザーとしてログインできます。パスワードもトークンも不要です。 この問題は Gitea に報告済みで、1.26.3 / 1.26.4 で修正されています。このリポジトリは、私自身の解説、動作す...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

cve-2026-20896-gitea-poc

CVE-2026-20896 Gitea Docker 認証バイパスチェッカー 認可されたレッドチーム / ペンテスト運用のみ。 このリポジトリには、CVE-2026-20896 用の最小限のチェッカーが含まれています。これは、リバースプロキシ認証が有効な場合に、公式 Gitea Docker イメージ（1.26.2 までを含む）における認証バイパスです。 CVE-2026-20896 とは 影響を受ける Gitea Docker イメージには、以下の app.ini テンプレートが同梱されていました： REVERSEPROXYTRUSTEDPROXIES = 管理者が以下を有効にした場...

CVE-2026-78122-POC

CVE-2026-78122 — 概念验证 Tecnativadocker-socket-proxy ≤ 0.5.0 — 访问控制粒度不足（CWE-1220） CVSS 4.0：8.3（高危） — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N 攻击向量为相邻网络 （AV:A）：攻击者需要与代理建立本地/相邻网络连接——这正是缓解措施中要求将其隔离在任何可路由接口之外的原因。 docker-socket-proxy 是一个面向 Docker 套接字的 HAProxy 前端，其全部意义在于为 Docker AP...

CVE-2026-43499

CVE-2026-43499 — Linux Kernel Futex PI 사용 후 해제 버그 removewaiter in kernel/locking/rtmutex.c는 slowlock 경로에서 사용되지만 futexrequeue에서 호출될 때 rtmutexstartproxylock의 프록시 잠금 롤백에도 사용됩니다. 프록시 잠금의 경우 waiter::task는 current가 아니지만 removewaiter는 잘못해서 current에 대해 동작합니다. 이로 인해 세 가지 문제가 발생합니다: 1. rbtree에서 제거가...

CVE-2026-59783

A flaw was found in Zabbix Server and Proxy. In deployments configured with a MySQL or MariaDB database backend, an authenticated remote attacker can cause a denial of service DoS by submitting binary items containing null bytes. This improper input handling causes the server or proxy process to...

CVE-2024-38473

Apache HTTP Server modproxy 인코딩 문제 PoC Proof of Concept 이 저장소는 Apache HTTP Server 2.4.59 및 이전 버전의 modproxy 모듈에서 발생하는 인코딩 문제를 시연하기 위한 PoCProof of Concept 스크립트를 포함하고 있습니다. 이 취약점은 잘못된 인코딩이 포함된 요청 URL이 백엔드 서비스로 전송되도록 하여, 조작된 요청을 통해 인증을 우회할 가능성이 있습니다. Table of Contents 취약점 설명 설정 및 사용법 중요 고려사항 완화 방법 취약...