CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ This script is...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

goproxy

GoProxy GoProxy は、Go（別名 Golang）を使って カスタマイズ可能な HTTP/HTTPS プロキシサーバー を作成するためのライブラリで、設定可能なオプションがいくつか用意されています。 このプロジェクトの目標は、ある程度のトラフィックを処理できる 最適化された プロキシサーバーを提供しつつ、カスタマイズ可能 で プログラム可能 なものにすることです。 プロキシ自体は単なる net/http ハンドラなので、その上に複数のミドルウェア（パニックリカバリ、ロギング、圧縮など）を追加できます。また、他の任意の HTTP ネットワークライブラリと簡単に統合できます。...

socks5

socks5 Socks5/Socks5h server and client This project is to add protocol support for the Bridge, or it can be used alone Usage API Documentation Example Support for the CONNECT command Support for the BIND command Support for the ASSOCIATE command License Licensed under the MIT License. See LICENS...

proxy.py

Table of Contents...

mcpsafetywarden

MCP safety warden は、任意の MCP サーバーをラップし、そのツールに行動プロファイリング、セキュリティスキャン、リスクゲーティング、安全な実行を追加するプロキシサーバーです。 目次 概要 前提条件 インストール 設定 MCP 統合 CLI リファレンス 補助的な統合 開発 テスト 参考資料 !IMPORTANT MCP セキュリティは活発な研究分野です。最近の調査では、ツールポイズニング、プロンプトインジェクション、ラグプル攻撃、サプライチェーン侵害、認証情報の窃取、サーバーライフサイクル全体にわたるコンポジション攻撃など、プロトコル固有の脅威...

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

test-cve-2025-29927

CVE-2025-29927 を悪用するテストアプリ NextJS アプリは Cookie ベースの認証と、/admin ページへの不正アクセスを防ぐミドルウェアを備えています。 アプリを起動するには、次のコマンドを実行します。 yarn then yarn dev CVE-2025-29927 の脆弱性を利用して /admin ページへの不正アクセスを行うには、リクエストに特別なヘッダーを追加するプロキシサーバーを実行します。 node scripts/proxy.js その後、http://localhost:8000/admin にアクセスします。...

[SECURITY] Fedora 45 Update: opensips-4.0.2-4.fc45

OpenSIPS or Open SIP Server is a very fast and flexible SIP RFC3261 proxy server. Written entirely in C, opensips can handle thousands calls per second even on low-budget hardware. A C Shell like scripting language provides full control over the server's behaviour. It's modular architecture allow...

threat-intel-brief-cve-2026-42208-litellm

脅威インテリジェンス速報 - CVE-2026-42208: BerriAI LiteLLM SQLインジェクション CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc CVSSスコア: 9.3（緊急） 影響を受けるソフトウェア: BerriAI LiteLLM バージョン = 1.81.16、 1.83.7 修正バージョン: 1.83.7-stable（2026年4月19日リリース） CISA KEV追加日: 2026年5月8日 情報源: CISA KEV、Sysdig TRT、The Hacker News、Security Affairs...

OpenStack Swift vulnerable to authenticated server-side request forgery

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-79538

The metatool-ai MetaMCP software, specifically version 2.4.22 and below, is vulnerable to Code Execution . This vulnerability exists in the internal MCP inspector proxy endpoint at GET /mcp-proxy/server/stdio. The root cause is located within the createTransport function in the STDIO branch , spe...

EUVD-2026-89360

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-59823: Server-Side Request Forgery (SSRF)

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place apibase inside the userconfig request body to bypass isrequestbodysafe, which blocks top-level apibase and baseurl but...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...