frp

frp README | 中文文档 frp 是一个专注于内网穿透的高性能的反向代理应用，支持 TCP、UDP、HTTP、HTTPS 等多种协议，且支持 P2P 通信。可以将内网服务以安全、便捷的方式通过具有公网 IP 节点的中转暴露到公网。 Sponsors frp 是一个完全开源的项目，我们的开发工作完全依靠赞助者们的支持。如果你愿意加入他们的行列，请考虑 赞助 frp 的开发。 Gold Sponsors The complete IDE crafted for professional Go developers The sovereign cloud that puts you ...

CVE-2016-8776

CVE-2016-8776 无需覆盖账户的 frp 绕过...

UNISOCUnlocker

UNISOCUnlocker Basado en CVE-2022-38694, esto añade una interfaz de usuario simple para eliminar la partición persist, comúnmente utilizada para FRP ¡IMPORTANTE! No te asustes si el dispositivo parece tener una pantalla negra. Después de que el script termine, pulsa el botón de encendido del...

CVE-2026-28658

CVE-2026-28658 is a local privilege escalation vulnerability in the findMetaAuthUid function of AccountsDb.java within the Android platform, caused by a logic error that allows a file resource protection (FRP) bypass . An attacker with low local privileges can exploit it without user interaction,...

EUVD-2026-73989

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28658

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-507575871

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

frp v0.71.0

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: eks-distro, k3s, traefik-fips, caddy, buf, cloudflared, caddy-fips, spegel, eks-distro-fips, kubernetes-dns-node-cache, frp, q, kubernetes-dns-node-cache-fips, traefik...

GO-2024-2459 vulnerabilities

Vulnerabilities for packages: caddy, frp...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, rancher, kyverno-fips, cloudbeat, ldap2pg, kyverno-notation-aws, gitlab-runner-fips, percona-server-mongodb-operator-fips, rclone-fips, trufflehog, kyverno-notation-aws-fips, opentofu, ratify, syncthing-fips, cert-manager-cmctl-fips,...

GO-2026-5676 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, kubernetes-dns-node-cache, kube-metrics-adapter, k8sgateway, kyverno-policy-reporter, k3s, traefik, kargo, dkron, jitsucom-bulker, coredns, kyverno-policy-reporter-ui, opentelemetry-operator, teleport, spegel, frp, q, kubo...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, caddy, traefik, dkron, k8sgateway, spegel, kubo, kubernetes-dns-node-cache, frp, kyverno-policy-reporter-ui, k3s, kargo, q...

GO-2024-2459 vulnerabilities

Vulnerabilities for packages: frp, caddy...

GO-2025-4233 vulnerabilities

Vulnerabilities for packages: buf, ipfs-cluster, caddy, traefik, dkron, k8sgateway, seaweedfs, kubo, spegel, kubernetes-dns-node-cache, frp, k3s, kargo, q...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: buf, caddy, spegel, kubernetes-dns-node-cache, frp, k3s, q, cloudflared...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, aactl, tigera-operator, crossplane-provider-aws-lambda, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, libnvidia-container, sigstore-scaffolding, trino, grafana-operator, harbor-registry, kubeflow-katib,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aactl, crossplane-provider-aws-iam, opensearch-k8s-operator, crossplane-provider-aws-lambda, kubernetes-csi-livenessprobe, yace, grafana-operator, harbor-registry, kubeflow-katib, kubernetes-event-exporter, kubernetes-dns-node-cache, k3s, mongodb-kubernetes-operator,...

CVE-2026-73564

creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:15+00:00| published-proof-of-concept| https://github.com/fatedier/frp/security/advisories/GHSA-26gq-p25f-99cp...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...