CVE-2026-84324

A Use after free vulnerability exists in the Proxy component of Google Chrome and Microsoft Edge (Chromium-based) prior to version 152.0.7977.75 . A remote attacker can exploit this flaw by sending crafted network traffic to execute arbitrary code outside the sandbox. This vulnerability has been ...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84476

WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof the client address used by enforceRateLimit. Attackers can rotate the header value per request to bypass login rate limiting and perform unlimited credential guessing...

CVE-2026-84476

WWBN AVideo contains an authentication bypass flaw in its login rate limiting mechanism. The application fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, which are consumed by the enforceRateLimit() function. An unauthenticated, network-based attacker can ...

EUVD-2026-66376

The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept open...

HTTP Request Smuggling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent parsing of HTTP requests. An attacker can access confidential responses intended for other...

bunkerweb v1.6.15-rc1

🌐 Website | 🤝 Panel | 📓 Documentation | 👨‍💻 Demo | 📱 Demo UI | 🧩 Templates | 🛡️ Examples 💬 Chat | 📝 Forum | 📝 Community | 🗺️ Threatmap | 📊 Status | 🔎 Feedback 🛡️ Make security by default great again! BunkerWeb Bun...

CVE-2026-78605

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2021-31188

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:42+00:00| seen| https://t.me/hackingAttack/8312 2026-09-02 01:03:18+00:00| seen| https://t.me/hackingAttack/8312 2026-09-08 07:00:05+00:00| seen| https://t.me/hackingAttack/8312 2026-09-09 00:00:39+00:00| seen|...

CVE-2021-31717

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:25+00:00| seen| https://t.me/hackingAttack/22454 2026-09-02 01:02:57+00:00| seen| https://t.me/hackingAttack/22454 2026-09-07 17:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/22454 2026-09-08 00:00:38+00:00|...

CVE-2021-24901

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:56+00:00| seen| https://t.me/hackingAttack/42050 2026-09-02 01:02:17+00:00| seen| https://t.me/hackingAttack/42050 2026-09-06 10:00:06+00:00| published-proof-of-concept| https://t.me/hackingAttack/42050 2026-09-07 01:00:24+00:00|...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data exposing process environment values, in getOptionsFromRootManifest.ts, which expands $VAR placeholders in the httpProxy, httpsProxy, and noProxy settings read from a repository-controlle...

GHSA-VX52-2968-3VC6 pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml

Summary pnpm expands $VAR environment placeholders in the httpProxy / httpsProxy / noProxy settings read from a project's pnpm-workspace.yaml. Because a project manifest is repository-controlled, a malicious repository that a victim merely clones and runs pnpm install in can route all install...

NPM: pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml

NPM: pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml vulnerability discovered by ? in WordPress Npm pnpm versions = 10.7.0, 10.34.5...

pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml

Summary pnpm expands $VAR environment placeholders in the httpProxy / httpsProxy / noProxy settings read from a project's pnpm-workspace.yaml. Because a project manifest is repository-controlled, a malicious repository that a victim merely clones and runs pnpm install in can route all install...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605

Elasticsearch is affected by an HTTP Request Smuggling flaw (CWE-444) that can lead to information disclosure . Under specific proxy deployment configurations, a network attacker with no prior authentication could obtain confidential responses intended for other authenticated users. The CVSS 3.1 ...

EUVD-2026-69568

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...