burp-alfresco-referer-proxy-cve-2014-9301

burp-alfresco-referer-proxy-cve-2014-9301...

cve-2023-37635

CVE-2023-37635 - 漏洞利用指南 安装与设置 1️⃣ 安装依赖 pip install -r requirements.txt 2️⃣ 运行漏洞利用 使用代理： python brutForc.py 不使用代理： python brutForc.py -n 注意事项： 将 替换为目标 URL。 -n 标志将禁用代理。 ⚠️ 免责声明 ：此脚本仅供教育和授权安全测试之用。未经授权的使用是非法的。...

propox

Propox 🛡️🚀 Propox es un proxy HTTP/HTTPS de alto rendimiento, seguro y observable escrito en Rust. Está diseñado para manejar tráfico de alto rendimiento mientras defiende activamente contra clientes abusivos mediante mecanismos de seguridad avanzados. ✨ Características Principales 🚀 Rendimiento...

CVE-2026-88899

CVE-2026-88899 - Knowns 0.30.0 未认证头部注入使 AI 代理可无限制访问主机文件系统 概述 一份关于 Knowns 为嵌入式 OpenCode AI 代理守护进程提供的反向代理的不当授权与头部欺骗漏洞报告被提交（internal/server/server.go）。报告指出，在将 HTTP 请求代理至本地 OpenCode 守护进程时，代理未能无条件覆盖 x-opencode-directory 请求头和 ?directory 查询参数。显式设置其中任一值的客户端可以将 OpenCode AI 代理指向主机文件系统上的任意目录，而非项目根目录。 由于...

cve-2026-49352-poc

CVE-2026-49352 — 9router ハードコードされたJWTシークレットによる認証バイパス 目次 概要 影響を受けるバージョン 根本原因 分析 リポジトリ構造 要件 使用方法 期待される出力 参考文献 免責事項 概要 CVE-2026-49352 は、AI コーディングツール向けのセルフホスト型 Node.js/Next.js プロキシである 9router の脆弱性です。ダッシュボードセッション JWT は JWTSECRET...

Simulation_CVE-2024-46256

CVE-2024-46256 & CVE-2024-46257 – PoCシミュレーション 概要 このリポジトリには、Nginx Proxy Managerにおける2つの脆弱性をシミュレートする、画像付きのステップバイステップのProof of Concept（PoC）が含まれています。これらの脆弱性はOSコマンドインジェクションを可能にし、認証後にリモートコード実行（RCE）に至ります。 影響を受ける製品: Nginx Proxy Manager 影響を受けるバージョン: v2.11.3 影響: 認証後のRCE（PoCではroot権限で確認） 内容 POC.md:...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.19 Update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scoring System CVSS base score, which gives a detailed severity rating, ...

CVE-2026-86105

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...

CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS-STREAM8:CLSA-2026:1782978575)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1782978575 advisory. - A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attack...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1781093705)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781093705 advisory. - When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are...

CentOS Linux 6 [TuxCare] Security Update: curl / libcurl / libcurl-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1787062885)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1787062885 advisory. - When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2025:1738695770)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1738695770 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from...

PT-2026-103485

Summary Axios supports proxy environment variables and evaluates NO PROXY exclusions in the Node.js adapter. CIDR-form NO PROXY entries such as 127.0.0.0/8, 10.0.0.0/8, or 169.254.169.254/32 are not interpreted as IP ranges. As a result, a request to an IP address inside a configured CIDR exclusi...

Linux Distros Unpatched Vulnerability : CVE-2026-101898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy setting...

Rocky Linux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779357790)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779357790 advisory. - libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections...

AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776763201)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776763201 advisory. - A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF Carriage Return Line Feed Injection, occurs...

Linux Distros Unpatched Vulnerability : CVE-2026-100663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty's HTTP/3 codec io.netty:netty-codec-http3 from 4.2.2.Final through 4.2.17.Final does not special- case HTTP/1 CONNECT authority-form request-targets when...

AlmaLinux 9.2 [TuxCare] Security Update: xdg-dbus-proxy (ALMALINUX9.2:CLSA-2026:1789132992)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789132992 advisory. - xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop...

CentOS Linux 7 [TuxCare] Security Update: curl / libcurl / libcurl-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786028705)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786028705 advisory. - When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the...

Linux Distros Unpatched Vulnerability : CVE-2026-97687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs,...