CVE-2026-86105

An improper authorization vulnerability exists in the Fireware OS Access Portal reverse proxy . This flaw allows an authenticated, low-privileged Access Portal user to gain unauthorized access to other web applications. By sending a specially crafted request for a resource they are already author...

CVE-2026-86105 Fireware OS Improper Authorization in Access Portal Reverse Proxy

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...

CVE-2026-86105 Fireware OS Improper Authorization in Access Portal Reverse Proxy

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...

CVE-2024-2053

LFIからRCEへのエクスプロイト（ログポイズニング経由） CVE-2024-2053（Artica Proxy）用のPython3エクスプロイト 📝 説明 このPython3スクリプトは、ローカルファイルインクルージョン（LFI）脆弱性を悪用し、ログポイズニング技術を介してリモートコード実行（RCE）を達成します。特にArtica Proxy（CVE-2024-2053）向けに設計されていますが、他のLFIシナリオにも適応可能です。 ⚡ 機能 複数のLFIテストベクター（/etc/passwd、/proc/self/environ） 回避用の4種類のPHPペイロードバリアント...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-76835

A flaw was found in oauth2-proxy. When configured in reverse-proxy mode without explicit trusted proxy settings, the application defaults to treating all incoming network traffic as originating from trusted proxies. A remote, unauthenticated attacker can exploit this issue by sending a request wi...

Aegis-releases

Aegis Claude Code's sandbox lets an agent read your SSH keys and AWS credentials by default. Aegis doesn't. Two layers, both verified on real hardware. Kernel sandbox — the agent's own shell cannot reach a denied path: $ ! cat /.ssh/idrsa cat: /Users/you/.ssh/idrsa: Operation not permitted $ ! ca...

CVE-2026-85719

A flaw was found in AsyncHttpClient. This vulnerability allows an attacker to expose SOCKS proxy credentials to the origin server when using an authenticated SOCKS proxy. This occurs because the library attaches Proxy-Authorization headers without verifying if the request is being sent to an HTTP...

CVE-2026-97687

A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security TLS settings inadvertently overwrite the proxy's TLS configuration, which can disabl...

DEBIAN-CVE-2026-97687

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

CVE-2026-97687

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

UBUNTU-CVE-2026-97687

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

CVE-2026-97687

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

CVE-2026-97687

The urllib3 Python HTTP client library (versions 1.26.0 through 2.8.0 ) contains a vulnerability where target-server TLS settings are incorrectly applied to HTTPS proxy connections. Specifically, configurations like proxy_ssl_context, ssl_context, and cert_reqs fail to remain separated, allowing ...

CVE-2026-97687

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

CVE-2026-97687 urllib3: HTTPS proxy TLS configuration may be ignored or overridden

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

CVE-2026-97687 urllib3: HTTPS proxy TLS configuration may be ignored or overridden

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

CVE-2026-97687 urllib3: HTTPS proxy TLS configuration may be ignored or overridden

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

zaphoster

zaphoster Fix host header forcing in zaproxy を修正 ZAP/zap-hoster.py スクリプトを httpsender タブに追加し、app.py を実行してください。 $ sudo pip3 install flask requests $ python3 app.py GET https://knassar702.github.io/ HTTP/1.1 Host: knassar702.github.io User-agent: Firefox test For Change host header --- GET...

CVE-2026-77756

A flaw was found in Apache Tomcat. This vulnerability, known as HTTP Request/Response Smuggling, occurs when Tomcat processes the transfer-encoding header for an HTTP/1.0 request while operating behind a reverse proxy. A remote attacker could exploit this to cause a denial of service, leading to...