squid

SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...

squidmagic

Squidmagic은 Squid 프록시 서버와 Spamhaus를 사용하여 웹 기반 네트워크 트래픽을 분석하고 중앙 명령 및 제어C&C 서버와 악성 사이트를 탐지하도록 설계된 도구입니다. 의존성 설치 root@kitploit: pip install -r requirements.txt 사용법 root@kitploit: python squidmagic.py /squid/access.log | | | | / |/ | | | | |/ | ' \ / |/ | |/ | \ \ | | || | | | | | | | | | | | | | |...

CVE-2025-62168

CVE-2025-62168 — Утечка токена Squid Proxy PoC Автор не несет ответственности за неправомерное использование или ущерб, причиненный данным инструментом. Исследование предоставляется исключительно в образовательных и защитных целях. Описание Этот репозиторий содержит Proof-of-Concept PoC для...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Squid Proxy에서 발견된 취약점. CVE-2025-54574 — Squid Proxy의 치명적인 힙 버퍼 오버플로우 이 저장소는 URN Trivial-HTTP 응답 처리 중에 트리거되는 Squid6.4의 치명적인 힙 기반 버퍼 오버플로우인 CVE-2025-54574의 발견, 분석 및 책임 있는 공개 절차를 문서화합니다. 이 취약점으로 인해 공격자가 제어하는 서버가 힙 메모리 경계를 벗어난 쓰기out-of-bounds heap writes, 메모리...

Squid Proxy - HTTP Authentication Credentials Disclosure

Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...

CVE-2025-62168

CVE-2025-62168 Раскрытие информации в Squid Proxy при обработке ошибок Сканер Обнаружение и PoC «Из-за сбоя при редактировании учетных данных HTTP-аутентификации Squid подвержен атаке с раскрытием информации. Серьезность: Эта проблема позволяет скрипту обойти защиту безопасности браузера и узнать...

CVE-2025-62168

CVE-2025-62168 Раскрытие информации в Squid Proxy при обработке ошибок Сканер Обнаружение и PoC "Из-за сбоя при редактировании учётных данных HTTP-аутентификации Squid уязвим к атаке с раскрытием информации. Серьёзность: Эта проблема позволяет скрипту обойти защиту браузера и узнать учётные данны...

Blackash-CVE-2025-54574

🛑 CVE-2025-54574 — Squid≤ 6.3의 힙 버퍼 오버플로 🛑 심각도: 치명적 CVSS 9.3 영향을 받는 소프트웨어: Squid 프록시버전 6.3 이하 취약점 유형: 힙 기반 버퍼 오버플로 발견 위치: URNUniform Resource Name 처리 영향: 원격 코드 실행 또는 서비스 거부 가능, 인증 없이 네트워크를 통해 악용 가능 🔍 문제는 무엇인가요? 이 결함은 Squid가 URN 응답을 구문 분석하는 과정에서 발생합니다. 부적절한 메모리 처리는 힙 오버플로를 유발하며, 악의적인 HTTP 응답이 메모리를...

Debian dla-4697 : squid - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4697 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4697-1 [email protected]...

CVE-2026-47729

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway src/clients/FtpGateway.cc, Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed...

K000162296: Squid-Proxy vulnerability CVE-2026-47729

Security Advisory Description This ID has been reserved by a CNA. This candidate has been reserved by a CVE Numbering Authority CNA. This record will be updated by the assigning CNA once details are available. Learn more about the Reserved state here. CVE-2026-47729 Impact There is no impact; F5...

PYSEC-2026-1252 Potential access to sensitive URLs via CKAN extensions (SSRF)

Impact There are a number of CKAN plugins, including XLoader, DataPusher, Resource proxy and ckanext-archiver, that work by downloading the contents of local or remote files in order to perform some actions with their contents e.g. pushing to the DataStore, streaming contents or saving a local...

The vulnerability of the strchr() function in the Squid proxy server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the strchr function in the Squid proxy server is related to the escape from memory buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic through the same proxy. The bug traces to a 1997 FTP-parsing change and is still live in Squid's default...

The vulnerability of the Squid proxy server, related to reading beyond the buffer in memory, allows attackers to cause a service failure.

The vulnerability of the Squid proxy server is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Important: Red Hat Security Advisory: squid:4 security update

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this...

The vulnerability of the Squid proxy server, related to improper blocking of resources, allows a violator to trigger a service failure.

The vulnerability of the Squid proxy server is related to improper blocking of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Squid proxy server, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Squid proxy server is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

[SECURITY] Fedora 43 Update: squid-7.5-1.fc43

Squid is a high-performance proxy caching server for Web clients, supporting FTP and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups...

RHEL 9 : squid (RHSA-2026:10256)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:10256 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: Squid: Deni...