DeleGate PROXY-FTP Service - Detect

DeleGate PROXY-FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DeleGate PROXY-FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'DeleGate...

Sidewinder FTP Proxy Service - Detect

Sidewinder FTP Proxy service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sidewinder FTP Proxy service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

SAP Web Dispatcher admin portal detection

Detection of SAP Web Dispatcher Admin Portal !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Web Dispatcher Admin Portal.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Web Dispatcher admin portal...

Artica Proxy Community Edition <4.30.000000 - Local File Inclusion Detection

Artica Proxy Community Edition before 4.30.000000 is vulnerable to local file inclusion via the fw.progrss.details.php popup parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Artica Proxy Community Edition before 4.""" import re from kittysploit import from lib.protocols.http.httpclient...

Appspace 6.2.4 - Server-Side Request Forgery Detection

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Appspace 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Appspace 6.2.4 - Server-Side...

Artica Proxy - Unauthenticated LFI Detection

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...

Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution Detection

critical unauthenticated remote code execution RCE vulnerability affecting Citrix ADC NetScaler ADC and Citrix Gateway appliances configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Exploitation can lead to arbitrary code execution. !/usr/bin/env python3 ...

Web Proxy Auto-Discovery Configuration File - Detect

Web Proxy Auto-Discovery configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web Proxy Auto-Discovery configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Pro...

BlueCoat Telnet Proxy - Detect

Detects Blue Coat telnet proxy services. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Blue Coat telnet proxy services.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'BlueCoat...

Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection Detection

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. !/usr/bin/env python3 -- coding: utf-8 -- """Artica Web Proxy 4.""" from kittysploit import from...

Detect tor SOCKS proxy

Detects Detect tor SOCKS proxy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect tor SOCKS proxy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect tor SOCKS proxy', 'description': 'Detects Detect tor...

Security update for libssh

This update for libssh fixes the following issues: CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. CVE-2026-59844: denial of service via oversized SFTP read length bsc1272165. CVE-2026-59845: denial of service via unchecked ProxyCommand fork failure bsc127216...

Security update for nginx

This update for nginx fixes the following issues CVE-2026-42055: heap-based buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. CVE-2026-48142: heap buffer over-read in the ngxhttpcharsetmodule module bsc1268495. Remote denial of service via the HTTP/2 bomb explo...

SUSE-SU-2026:3329-1 Security update for nginx

This update for nginx fixes the following issues - CVE-2026-42055: heap-based buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. - CVE-2026-48142: heap buffer over-read in the ngxhttpcharsetmodule module bsc1268495. - Remote denial of service via the HTTP/2 bomb...

CVE-2026-64238

A flaw was found in the Linux kernel's gpio: shared component. A too wide critical section, intended to protect the offset field in the struct gpiosharedentry, can lead to a potential deadlock. This occurs during the removal of a shared General Purpose Input/Output GPIO proxy's parent. A successf...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...

httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...