Lucene search
+L

30 matches found

Kitploit
Kitploit
added 2026/09/14 2:21 a.m.5 views

stegowiper

stegoWiper: Un ataque activo potente y flexible para interrumpir el stegomalware Durante los últimos 10 años, muchos grupos de amenazas han empleado stegomalware u otras técnicas basadas en esteganografía para atacar organizaciones de todos los sectores y en todas las regiones del mundo. Algunos...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 8:24 a.m.10 views

pip3line

Pip3line Codacy Badge Compilaciones Linux / MacOS Compilaciones Windows Utilidad de manipulación de bytes brutos, capaz de aplicar transformaciones conocidas y menos conocidas, búsqueda binaria rápida, interceptación de proxy de red y más. Instalación en Windows: Descargue el zip de la versión aq...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 4:05 a.m.7 views

ssh-mitm

SSH MITM v2.3-dev Autor: Joe Testa @therealjoetesta Resumen Esta herramienta de pruebas de penetración permite a un auditor interceptar conexiones SSH. Un parche aplicado al código fuente de OpenSSH v7.5p1 hace que actúe como un proxy entre la víctima y su servidor SSH destino; todas las...

6.1AI score
SaveExploits0
CVE
CVE
added 2026/06/15 3:00 p.m.133 views

CVE-2026-9595

The CVE affects webpack-dev-server where a user-configured proxy with a broad context (e.g., /) and ws: true intercepts the dev server’s HMR WebSocket, forwarding it to the proxy target. This can leak cookies and Origin headers to the backend, bypass Host/Origin validation, and corrupt the HMR so...

5.3CVSS5.3AI score0.00163EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2026/05/28 7:07 a.m.29 views

libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential...

8.2CVSS5.8AI score0.00254EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/05/07 2:06 a.m.48 views

CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content

Summary The CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle MITM attacker to inject or modify CSS content when stylesheets are loaded via HTTPS. The connection is established with OpenSSL::SSL::VERIFYNONE, meaning any HTTPS certificate—even entirely untrusted—will...

5.8CVSS5.8AI score0.00146EPSS
SaveExploits0References7Affected Software1
RedHat Linux
RedHat Linux
added 2026/05/06 1:00 p.m.105 views

libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential...

8.2CVSS5.7AI score0.00254EPSS
SaveExploits1References5
OSV
OSV
added 2026/04/25 11:11 a.m.13 views

OESA-2026-2027 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup. When establishing HTTPS tunnels through a configur...

8.2CVSS5.5AI score0.00254EPSS
SaveExploits1References2
Talos Blog
Talos Blog
added 2026/03/18 10:00 a.m.9 views

Transparent COM instrumentation for malware analysis

COM automation is a core Windows technology that allows code to access external functionality through well-defined interfaces. It is similar to traditionally loading a DLL, but is class-based rather than function-based. Many advanced Windows capabilities are exposed through COM, such as Windows...

6.1AI score
SaveExploits0
OSV
OSV
added 2026/03/11 7:31 p.m.7 views

CVE-2026-31960 DoS in Quill via unbounded read of HTTP response body during notarization

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 has unbounded reads of HTTP response bodies during the Apple notarization process. Exploitation requires the ability to modify API responses from Apple's notarization service, which is not...

5.3CVSS5.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/11 7:30 p.m.6 views

CVE-2026-31959 SSRF in Quill via unvalidated URL from Apple notarization log retrieval

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains a Server-Side Request Forgery SSRF vulnerability when attempting to fetch the Apple notarization submission logs. Exploitation requires the ability to modify API responses from Apple'...

5.3CVSS5.9AI score0.00097EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-39607

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.00384EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:37 a.m.11 views

CVE-2024-42408

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to additional information exposure...

6.9CVSS6.5AI score0.00384EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/12/04 3:26 a.m.8 views

CVE-2024-12123 Unauthorized Modification of Ticket Requester

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy. The ticket requester can be changed from the...

5.3CVSS6.6AI score0.00376EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/04 3:26 a.m.30 views

CVE-2024-12123 Unauthorized Modification of Ticket Requester

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy. The ticket requester can be changed from the...

5.3CVSS0.00376EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/04 12:00 a.m.14 views

PT-2024-17449 · Issuetrak · Issuetrak

Name of the Vulnerable Software and Affected Versions: Issuetrak version 17.1 Description: A hidden field manipulation issue was identified that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and modified by using a proxy...

5.3CVSS6.7AI score0.00376EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/08 6:15 p.m.7 views

CVE-2024-42408

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to additional information exposure...

3.7CVSS5.8AI score0.00384EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/08 5:27 p.m.50 views

CVE-2024-42408 Dorsett Controls InfoScan Path Traversal

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to additional information exposure...

6.9CVSS0.00384EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/26 4:15 p.m.55 views

CVE-2024-25637

October is a self-hosted CMS platform based on the Laravel PHP Framework. The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this vulnerability cannot be exploited through normal browser interaction...

5.4CVSS0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/26 3:55 p.m.30 views

CVE-2024-25637 Reflected XSS via X-October-Request-Handler Header

October is a self-hosted CMS platform based on the Laravel PHP Framework. The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this vulnerability cannot be exploited through normal browser interaction...

3.1CVSS6.7AI score0.00263EPSS
SaveExploits0References1
Rows per page
Query Builder