488 matches found
web-traffic-generator
web-traffic-generator एक त्वरित और गंदा HTTP/S "ऑर्गेनिक" ट्रैफ़िक जनरेटर। परिचय यह सिर्फ़ एक साधारण बुरी तरह लिखा गया Python स्क्रिप्ट है जो पूर्व-परिभाषित ROOTURLS से शुरू करके और पृष्ठों पर लिंक पर बेतरतीब ढंग से "क्लिक" करते हुए तब तक इंटरनेट पर लक्ष्यहीन रूप से "ब्राउज़" करती है जब तक कि...
EKFiddle
EKFiddle v.1.2.6 Uma extensão/regras para o depurador web Fiddler Classic para analisar tráfego web malicioso. Fiddler Classic Instalação Baixe e instale o Fiddler a partir daqui: https://www.telerik.com/fiddler Baixe e execute o EKFiddleExtension.exe Alternativamente, baixe o EKFiddle.dll e...
burpgpt
!IMPORTANT Anunciamos o lançamento do BurpGPT Pro, a edição especialmente desenvolvida para atender às necessidades de profissionais e boutiques de cibersegurança. Descubra uma série de funcionalidades poderosas e uma interface amigável que aprimora suas capacidades e garante uma experiência de...
betwixt
Betwixt vai ajudá-lo a analisar o tráfego web fora do navegador usando a interface familiar do Chrome DevTools. Instalando Baixe o último lançamento para seu sistema operacional, compile seu próprio pacote ou execute Betwixt a partir do código-fonte. Configuração Para capturar tráfego, você...
web-traffic-generator
web-traffic-generator Um gerador de tráfego HTTP/S "orgânico", rápido e sujo. Sobre Apenas um script Python simples mal escrito que "navega" pela internet de forma aleatória, começando por ROOTURLS pré-definidos e "clicando" aleatoriamente em links nas páginas até atingir o MAXDEPTH pré-definido...
tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulation
A flaw was found in Apache Tomcat. This vulnerability, caused by a race condition during concurrent execution, allows an attacker to inject unauthorized data, known as trailer fields, into another user's HTTP/2 request. This could lead to the manipulation of web traffic or unintended information...
CVE-2026-87626
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors. The attackers named the implant ted in debug strings left in the...
CVE-2026-16792 Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-16792
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-18753
CVE-2026-18753 concerns GV-AS1620 Controller Firmware (GV-ASManager). The firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this private key allows attackers to decrypt HTTPS traffic and spoof the server, compromising confidenti...
CVE-2026-16504
The VPS.org one-click Zulip template contains multiple vulnerabilities due to the use of static templates without per-deployment randomization. Specifically, the template deploys with a hardcoded application signing key (secret_key: changeme ), a default database password (zulip ), and the config...
EUVD-2026-46858
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content:...
EUVD-2026-46804
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...
CVE-2026-53727
Summary: Multiple sources confirm a vulnerability in css_parser prior to 3.0.0 where CssParser::Parser#read_remote_file, Parser#load_uri!, and Parser#add_block! follow HTTP(S) redirects and even service file:// URIs without proper host/scheme filtering, enabling SSRF to internal hosts and potenti...
CVE-2026-35146 HCL DFXServer is affected by an Unencrypted Communication vulnerability.
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user...
MAL-2026-10165 Malicious code in @injectivelabs/sdk-ts (npm)
@injectivelabs/[email protected] published 2026-07-08 20:59 UTC contains a wallet-credential stealer disguised as "key derivation telemetry". A file packages/sdk-ts/src/utils/key-derivation-telemetry.ts plus a hook added to packages/sdk-ts/src/core/accounts/PrivateKey.ts capture wallet secrets durin...
PYSEC-2026-1596 HTTP/HTTPS Traffic Interception Bypass in mad-proxy
A vulnerability in mad-proxy versions = 0.3 allows attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic...
Malicious Package
Overview @glitchpad/throttler is a malicious package. This package contains malicious code and is part of a coordinated npm supply-chain campaign. It ships an obfuscated postinstall payload that downloads and executes a Rust-compiled infostealer binary. Impact The infostealer targets crypto...
