lbmap

Proof of concept scripts for advanced HTTP fingerprinting, presented at OWASP AppSecAsia 2012. These scripts should be considered a PoC or alpha quality. Suggestions, recommendations, signatures, pathces and flames are welcome via http://www.github.com/wireghoul/lbmap. The following tools are...

CVE-2026-111998

Vanus versions 0.8.0 through 0.9.0 are vulnerable to a default credentials vulnerability (CWE-1392) involving a hardcoded admin token . Unauthenticated remote attackers can exploit this by sending the fixed Bearer token to the gateway gRPC proxy port . Successful exploitation grants the attacker ...

EUVD-2026-103451

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users,...

CVE-2026-111998 Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users,...

CVE-2026-111998 Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users,...

curl: CURLOPT_PROXYHEADER is not part of the HTTP-proxy connection reuse key: a second CONNECT-tunnel transfer silently reuses the first tunnel's Proxy-Auth

Summary When libcurl tunnels through an HTTP proxy with CONNECT HTTPS-over-proxy, the custom headers set via CURLOPTPROXYHEADER are sent to the proxy once, at tunnel-setup time lib/httpproxy.c:63-83. The connection-reuse decision for a proxied connection, however, does not take proxyheaders into...

PacketPirate

PacketPirate A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems. It operates similarly to industry-standard GUI proxies but is optimized for automation environments, headless operation, and integration wi...

nginx-CVE-2017-7529

Nginx out-of-bounds read cache vulnerability CVE-2017-7529 Vulnerability Principle References: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ When Nginx acts ...

yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

mcp-pwn

CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution Summary MCPJam is an open-source MCP Model Context Protocol inspector and proxy used to connect, debug, and manage MCP servers. Versions = 1.4.3 Attack Vector| Network — No Authentication Required Disclosure| 2026-01-15 Technical...

cve-2026-85706-poc-exploit-gitlab

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

Security update for python-urllib3 (important)

openSUSE security update: security update for python-urllib3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22071-1 Rating: important References: bsc1283908 bsc1283909 bsc1283910 Cross-References: CVE-2026-97687 CVE-2026-97688 CVE-2026-97689 CVSS...

CVE-2025-64513

CVE-2025-64513 – Milvus Proxy Authentication Bypass Vulnerability PoC 📘 Overview This repository contains a proof-of-concept PoC script to verify the existence of CVE-2025-64513 , a critical authentication bypass vulnerability in Milvus Proxy that may allow unauthorized access to internal APIs...

CVE-2025-30208_POC

Scan without proxy python3 poc.py -f urls.txt Scan with proxy python3 poc.py -f urls.txt --proxy http://127.0.0.1:8080...

martian

Martian Proxy Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: Verify that all or some subset of requests are secure Mock external services at the network layer Inject headers, modify cookies or perform other mutations of...

CVE-2026-111927

Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyByHostname whose SIMILAR TO pattern performs a prefix match, so any domain that is a string prefix of a workspace-proxy access URL is trust...

CVE-2026-111931 Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which becom...

CVE-2026-111931

The Coder software (versions 2.0.0 before 2.34.8 ) contains an open redirect vulnerability in the handleAPIKeySmuggling function. The root cause is the use of unsanitized r.URL.Path values , which allows an attacker to craft links on trusted workspace app subdomains using paths starting with doub...