201 matches found
-cve-2021-45232
Get Full Article Soon On https://Hellofhackers.com...
CLEANSTART-2026-DP22487 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
Security vulnerability affects the argo-workflows package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...
[SECURITY] Fedora 45 Update: perl-Plack-Middleware-ReverseProxy-0.17-1.fc45
Plack::Middleware::ReverseProxy resets some HTTP headers, which changed by reverse-proxy. You can specify the reverse proxy address and stop fake requests using 'enableif' directive in your app.psgi...
CLEANSTART-2026-WO54413 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...
CLEANSTART-2026-NE13080 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...
Fedora 45 : perl-Plack / perl-Plack-Middleware-ReverseProxy (2026-04e2968a8a)
The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-04e2968a8a advisory. A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive...
CLEANSTART-2024-GD06275 Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http
Security vulnerability affects the go package. Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http...
CLEANSTART-2026-GJ06320 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...
CLEANSTART-2026-LF87483 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...
CLEANSTART-2026-TO34940 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
Security vulnerability affects the prometheus package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the finalizeResponse function in the reverse proxy. An attacker who controls or influences an upstream WebSocket handler can return hop-by-hop headers in a 101 Switching Protocols response, which Caddy forward...
[SECURITY] Fedora 43 Update: perl-Plack-Middleware-ReverseProxy-0.17-1.fc43
Plack::Middleware::ReverseProxy resets some HTTP headers, which changed by reverse-proxy. You can specify the reverse proxy address and stop fake requests using 'enableif' directive in your app.psgi...
[SECURITY] Fedora 44 Update: perl-Plack-Middleware-ReverseProxy-0.17-1.fc44
Plack::Middleware::ReverseProxy resets some HTTP headers, which changed by reverse-proxy. You can specify the reverse proxy address and stop fake requests using 'enableif' directive in your app.psgi...
CLEANSTART-2026-UK88446 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-3225)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3225 advisory. When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server reject...
Amazon Linux 2 : golang (ALAS-2026-4005)
The version of golang installed on the remote host is prior to 1.26.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4005 advisory. When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the...
CLEANSTART-2026-RJ47972 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
Security vulnerability affects the argo-cd package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...
PT-2026-135176
Security vulnerability affects the argo-cd package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...
Astra Linux – vulnerability in golang-1.15
In Go versions prior to 1.15.13 and 1.16.x prior to 1.16.5, certain configurations of ReverseProxy from net/http/httputil allow an attacker to drop arbitrary headers...
Astra Linux – Vulnerability in Golang-1.23
ReverseProxy can forward queries containing parameters that are not visible to the Rewrite function. When used with a Rewrite function, or a Director function that parses query parameters, ReverseProxy sanitizes the forwarded request by removing parameters that are not parsed by url.ParseQuery...