649 matches found
apk-interceptor
apk-interceptor Android deeplink、Intent、WebViewブリッジの評価支援ツール apk-interceptorは、許可されたアプリケーションセキュリティ評価のためのポータブルなAndroidテストAPKです。セキュリティエンジニアが、AndroidアプリがカスタムURIスキーム、ディープリンク、エクスポートされたActivity、WebView JavaScriptブリッジなどの外部エントリポイントをどのように処理するかを検証するのに役立ちます。 このツールは意図的に制約されています： android.permission.INTERNET...
Espionage
Espionage - Linux用ネットワークトラフィックインターセプター 掲載先 Espionageについて...
CVE-2026-90520
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...
EUVD-2026-77011
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...
CVE-2026-90520
jaychouchannel Tourism-Management-System is affected by an improper authorization flaw in the AuthorizationInterceptor.java file of the Authorization Interceptor component. The vulnerability allows a remote attacker with low privileges and no user interaction to exploit it, resulting in low impac...
PT-2026-90854
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...
cve-2026-34486-tomcat_encrypt_bypass_reproduction
CVE-2026-34486: Apache Tomcat EncryptInterceptor バイパス...
Interceptor
Interceptor 作者：@Cerbersec Interceptor 是一个内核驱动程序，专注于通过修补内核回调和挂钩 IRP，在内核空间中篡改 EDR/AV 解决方案。 Interceptor 是 NVISO Security 红队实习期间的作品。相关博客文章可以在此处（kernel karnage）找到。 2022 年，Kernel Karnage 在 SANS Pen Test HackFest 上进行了展示，促使本仓库向公众发布，并附带以下演示： https://www.youtube.com/watch?v=QHEzyCGz-rk...
undici: undici: HTTP response splitting via retry interceptor
A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...
BIT-TOMCAT-2026-55955 Apache Tomcat: EncryptInterceptor not protected against replay attacks
Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, from...
undici: undici: Integrity failure due to caching of unsafe HTTP method responses
A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...
undici: undici: HTTP response splitting via retry interceptor
A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...
undici: Undici: Response truncation and connection termination
A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...
CVE-2026-85008
A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...
CVE-2026-18540
A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...
Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. id: CVE-2026-34486 info: name: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote...
CVE-2026-84890
undicis decompress interceptor decompresses response bodies according...
UBUNTU-CVE-2026-18540
undicis retry interceptor can append the body of a ranged retry respo...