29819 matches found
CVE-2021-42756
CVE-2021-42756 Múltiples vulnerabilidades de desbordamiento de búfer basadas en pila CWE-121 en el demonio proxy de FortiWeb 5.x todas las versiones, 6.0.7 y anteriores, 6.1.2 y anteriores, 6.2.6 y anteriores, 6.3.16 y anteriores, 6.4 todas las versiones pueden permitir que un atacante remoto no...
react2shell_analyzer
Analizador React2Shell Un potente analizador de proxy HTTP para inspeccionar el tráfico de Server Actions de Next.js entre su navegador/PoC y el servidor Next.js. Repositorio de GitHub https://github.com/Benrich127N/react2shellanalyzer.git Características 🔍 Inspección de Cabeceras : Registra toda...
BurpSuite-Team-Extension
BurpSuite-Team-Extension Este plugin de Burpsuite permite que varios evaluadores compartan entre sí, en tiempo real, solicitudes de proxy en vivo/históricas, el alcance y los payloads de Repeater/Intruder, lo que permite realizar pruebas de aplicaciones web verdaderamente colaborativas. Cuando es...
ReverseSock5Proxy
Reverse TCP Sock5 Proxy Un pequeño proxy inverso Sock5 Servidor La GUI del servidor construida con ImGui :V Puedes descargar una versión precompilada desde Releases. Compilación Necesitas gcc versión 12+ la recomendada para Windows Conan Package Manager Y ejecuta cualquier script de la carpeta...
cve-2025-24472-fortinet_authbypass_reproduction
CVE-2025-24472 — تجاوز المصادقة في Fortinet FortiOS / FortiProxy نظرة عامة CVE-2025-24472 هي ثغرة تجاوز مصادقة في Fortinet FortiOS وFortiProxy. يمكن لمهاجم غير مصادَق صياغة طلبات وكيل CSF Central Security Fabric مصمَّمة خصيصًا للحصول على صلاحيات المشرف الأعلى على الأجهزة المتأثرة. تحمل الثغرة درج...
[SECURITY] Fedora 45 Update: xdg-dbus-proxy-0.1.9-1.fc45
xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts...
[SECURITY] Fedora 45 Update: opensips-4.0.2-4.fc45
OpenSIPS or Open SIP Server is a very fast and flexible SIP RFC3261 proxy server. Written entirely in C, opensips can handle thousands calls per second even on low-budget hardware. A C Shell like scripting language provides full control over the server's behaviour. It's modular architecture allow...
PT-2026-104555
Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...
xdg-dbus-proxy-0.1.9-1.1 on GA media (moderate)
xdg-dbus-proxy-0.1.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11913-1 Rating: moderate Cross-References: CVE-2026-93676 CVE-2026-94422 CVSS scores: CVE-2026-93676 SUSE : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2026-93676 SUSE : 4.8...
SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
High Package gomod github.com/siyuan-note/siyuan/kernel Affected versions 3.7.3 Patched versions none yet — leave blank until a fix is released Description Summary /ws/network/proxy is an admin-only WebSocket forward-proxy endpoint target URL and headers fully attacker-specifiable via query...
GHSA-3CC2-H3V6-RQPQ SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
High Package gomod github.com/siyuan-note/siyuan/kernel Affected versions 3.7.3 Patched versions none yet — leave blank until a fix is released Description Summary /ws/network/proxy is an admin-only WebSocket forward-proxy endpoint target URL and headers fully attacker-specifiable via query...
[SECURITY] [DSA 6540-1] radsecproxy security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6540-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules CSM that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below - CVE-2026-63688 CVSS score: 10.0 - A missing authentication for critic...
AZL-105923 CVE-2026-94422 affecting package xdg-dbus-proxy 0.1.6-2
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
DEBIAN-CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
EUVD-2026-91646
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...