authelia

!OpenSSF Best...

HTTP3ONSTEROIDS

Table of contents Vulnerability Description Source Code Review Lab Setup Identifying the issue References Vulnerability Description HAProxy's HTTP/3 implementation fails to block a malformed HTTP header field name , and when deployed in front of a server that incorrectly process this malformed...

CVE-2021-40346-POC

CVE-2021-40346-POC CVE-2021-40346 integer overflow enables http smuggling 整数溢出导致的http请求走私 中文分析：HAProxy请求走私漏洞（CVE-2021-40346）分析 Reference: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/ Build root@kitploit: git clone...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling Solo a scopo educativo Configurazione root@kitploit: $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 Test Conferma che /admin ...

multitor

multitor Crea più istanze TOR con bilanciamento del carico. Descrizione • Introduzione • Come Usare • Parametri • Requisiti • Docker • Altro • Licenza • Wiki Descrizione Fornisce un singolo endpoint per i client. Supporta HAProxy , il protocollo socks e server http-proxy : polipo , privoxy e hpts...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

HAProxy_CVE-2021-40346

HAProxyCVE-2021-40346 HAProxy CVE-2021-40346 Analisi Seguici Vulnmachines YouTube Twitter Facebook...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP Request Smuggling - Bypass ACL Panoramica Questo progetto dimostra CVE-2021-40346 , una vulnerabilità critica di integer overflow in HAProxy che consente attacchi di HTTP Request Smuggling per aggirare i controlli di sicurezza. Punteggio CVSSv3: 7.5 Alto Collaboratori...

HAProxy-CVE-2023-45539-PoC

HAProxy-CVE-2023-45539-PoC HAProxy precedente alla versione 2.8.2 accetta come parte del componente URI, il che potrebbe consentire a un attaccante remoto di ottenere informazioni sensibili o avere un impatto non specificato a causa di un'interpretazione errata di una regola pathend, come...

CVE-2026-33555

Bypass della Validazione del Body FIN Standalone in HAProxy H3/QUIC tramite HTTP Request Smuggling Post completo qui : https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Riepilogo Una vulnerabilità nell'implementazione HTTP/3 di HAProxy consente a un attaccante di...

HAProxy-Keepalived-Sec-HighLoads

Installazione e Configurazione di HAProxy e Keepalived LoadBalancer+Cluster+Sec+HighLoads HAProxy è un software open source che fornisce un servizio proxy per applicazioni TCP e HTTP con bilanciamento del carico ad alta disponibilità. Keepalived è un software open source in grado di fornire la...

CVE-2021-40346

CVE-2021-40346 हेडर अनुरोध आंतरिक प्रतिनिधित्व पर इंटीजर ओवरफ्लो HTTP रिक्वेस्ट स्मगलिंग की अनुमति देता है। यह रिपॉजिटरी docker-compose का उपयोग करके निर्मित एक PoC प्रस्तुत करता है, जिसमें दो डॉकर इमेज शामिल हैं: एक HaProxy के कमजोर संस्करण इस मामले में 2.2.16 के साथ और एक Flask वेब सर्वर जो WSG...

EUVD-2026-66819

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52...

cnc-relay

cnc-relay Durante un esercizio di red team è comune configurare un'infrastruttura di relay per separare la propria superficie esterna dal backend effettivo di command and control. Alcune delle opzioni leggere più diffuse consistono nel configurare HAProxy o NGINX su infrastruttura cloud usa e get...

CVE-2026-47845

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52...

CVE-2026-47845

Reactor Netty HTTP Server may incorrectly evaluate the remote IP address in specific scenarios when the HAProxy Protocol is enabled, allowing a client to spoof the reported source address. Affected versions are 1.3.0–1.3.6 , 1.1.0–1.2.18 , and 1.0.52 and earlier . The vulnerability is rated CVSS ...

CVE-2026-47845 Reactor Netty HTTP Server may incorrectly evaluate proxy addresses

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52...

CVE-2021-40346

CVE-2021-40346 — Overflow di interi in HAProxy che porta allo Smuggling di richieste HTTP Riepilogo della vulnerabilità HAProxy è un reverse proxy open source e load balancer, un software che gestisce il bilanciamento del carico e l'elaborazione delle ACL regole di controllo degli accessi...

PT-2026-82347

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52...

CVE-2026-78122-POC

CVE-2026-78122 — प्रूफ ऑफ कॉन्सेप्ट Tecnativadocker-socket-proxy ≤ 0.5.0 — अपर्याप्त एक्सेस-नियंत्रण ग्रैन्युलैरिटी CWE-1220 CVSS 4.0: 8.3 उच्च — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N हमला वेक्टर एडजेसेंट आसन्न है AV:A: हमलावर को प्रॉक्सी तक लोकल/आसन्न नेटवर्क पहुँच की...