CVE-2024-0311

CVE-2024-0311 ? これは、私が思うに CVE-2024-0311 および SB10418 の PoC です。 悪意のある内部関係者は、有効なリリースコードなしに Skyhigh Client Proxy の既存ポリシーをバイパスできます。 詳細は多め。エクスプロイト強め。 ¯\ツ /¯ この PoC は、ユーザーが実行した SCPBypass.exe プロセスにインジェクションし、SCPService.exe のパイプ \.\pipe\MCPTrayPipe0 に書き込みを行います。パイプが RW Everyone であっても、WGUARDNT...

CVE-2026-45232 Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establishproxyconnection function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves...

CVE-2025-12101

Cross-Site Scripting XSS in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

Malicious Package

Overview paysafe-client-proxy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48750 Malicious code in paysafe-client-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ca3abf57e822e819e2d6ce06757f3a061020e9f84cde317ba1382e03d945884 Any computer that has this package installed or running should be considered...

Malicious code in paysafe-client-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ca3abf57e822e819e2d6ce06757f3a061020e9f84cde317ba1382e03d945884 Any computer that has this package installed or running should be considered...

EUVD-2019-13289

Malware in sbrugna...

EUVD-2024-16107

Malicious code in bioql PyPI...

EUVD-2024-16108

Malicious code in bioql PyPI...

EUVD-2022-39474

Malicious code in bioql PyPI...

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2019-3654

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...

Security Bulletin: IBM Robotic Process Automation is vulnerable to man in the middle attacks through manipulation of client proxy (CVE-2022-36774)

Summary IBM Robotic Process automation is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. Vulnerability Details CVEID:CVE-2022-36774 DESCRIPTION: IBM Robotic Process automation is vulnerable to man in the middle attacks through manipulation of the...

Exploit for CVE-2024-0311

CVE-2024-0311 ? This is a PoC for what I believe is CVE-...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2024-0312

CVE-2024-0312 affects Skyhigh Client Proxy. Multiple sources confirm a vulnerability that allows a malicious insider to uninstall the proxy without a valid uninstall password. CNNVD specifies Skyhigh Client Proxy vulnerable versions up to 4.8.1 and earlier; other documents do not specify a fix. T...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...