CVE-2026-43499

CVE-2026-43499 — Использование после освобождения в Futex PI ядра Linux Ошибка removewaiter в kernel/locking/rtmutex.c используется путями медленной блокировки, а также для отката прокси-блокировки в rtmutexstartproxylock, вызываемой из futexrequeue. В случае прокси-блокировки waiter::task не...

CVE-2026-101898 Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplied DNS lookup policy. An HTTPS request uses httpVersion: 2 with explicit config.proxy or environment-derived proxy...

CVE-2026-101898

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplied DNS lookup policy. An HTTPS request uses httpVersion: 2 with explicit config.proxy or environment-derived proxy...

CVE-2026-101898 Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplied DNS lookup policy. An HTTPS request uses httpVersion: 2 with explicit config.proxy or environment-derived proxy...

CVE-2026-101898

The Axios promise-based HTTP client for the browser and Node.js is vulnerable in versions 1.13.0 through 1.20.0 . The HTTP/2 adapter fails to consistently apply configured proxy settings or caller-supplied DNS lookup policies during request setup. Specifically, an HTTPS request using httpVersion:...

CVE-2026-101898 Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplied DNS lookup policy. An HTTPS request uses httpVersion: 2 with explicit config.proxy or environment-derived proxy...

GO-2026-6490 Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends in github.com/centrifugal/centrifugo

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends in github.com/centrifugal/centrifugo...

GO-2026-6517 kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

kcp front-proxy does not strip inbound X-Remote- identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp...

GO-2026-6514 Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses...

CVE-2024-38473

Preuve de Concept PoC pour le Problème d'Encodage dans modproxy du Serveur HTTP Apache Ce dépôt contient des scripts de Preuve de Concept PoC pour démontrer un problème d'encodage dans le module modproxy du Serveur HTTP Apache versions 2.4.59 et antérieures. Cette vulnérabilité permet d'envoyer d...

Vite-CVE-2025-30208-Scanner

Vite CVE-2025-30208 취약점을 탐지하는 자동화 도구로, 일괄 스캔 및 결과 저장을 지원합니다. 기능 ✅ 컬러 터미널 출력 ✅ 다중 대상 일괄 스캔파일 가져오기 지원 ✅ 멀티스레드 동시 탐지스레드 수 조정 가능 ✅ 취약점 결과 자동 저장타임스탬프 포함 ✅ 프록시 서버 지원 ✅ 사용자 정의 탐지 경로 ✅ 무작위 요청 헤더 사용 설치 및 사용 1. 저장소 클론: git clone https://github.com/marino-admin/Vite-CVE-2025-30208-Scanner.git cd...

curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker...

libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials

A flaw was found in curl. When libcurl is instructed to clear proxy authentication credentials, it fails to do so, leaving the old credentials available. This could lead to the unintended reuse of sensitive proxy authentication credentials for subsequent network transfers, potentially resulting i...

curl: Information disclosure due to uncleared proxy authentication state

A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of Proxy-Authorization headers to an incorrec...

Important: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

bifrost

Bifrost Высокопроизводительный прокси-сервер HTTP/HTTPS/SOCKS5 Language: 中文 | English · Documentation site Bifrost — это высокопроизводительный, дружественный к AI прокси-сервер, написанный на Rust, вдохновлённый Whistle. Он предоставляет возможности перехвата запросов, модификации правил,...

Confluence-RCE

Использование: python3 mian.py Обнаружение Выполнение команд Обратная оболочка Reverse Shell Поддержка прокси socks5 и http Только для общения и обучения...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in http-proxy-middleware

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in http-proxy-middleware in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-55602 DESCRIPTION: http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0,...

CVE-2023-36802

CVE-2023-36802 CVE-2023-36802 Cas ITW Explication Utilisation de la primitive PreviousMode pour écraser https://cwresearch.tistory.com/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 Remerciements chompie Google Project 0...

badbox-h713-projector

Проектор с вредоносным ПО Wielo / Atongmu: анализ и очистка BadBox AT-M269 / H713 26 сен 2026 · @R Дешёвый Android-проектор Wielo / Atongmu AT-M269, Allwinner H713 поставляется с дроппером системного уровня, который превращает его в узел резидентного прокси. В этом документе показано, как получит...