nginx-CVE-2017-7529

Nginx out-of-bounds read cache vulnerability CVE-2017-7529 Vulnerability Principle References: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ When Nginx acts ...

yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

cve-2026-85706-poc-exploit-gitlab

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

Security update for python-urllib3 (important)

openSUSE security update: security update for python-urllib3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22071-1 Rating: important References: bsc1283908 bsc1283909 bsc1283910 Cross-References: CVE-2026-97687 CVE-2026-97688 CVE-2026-97689 CVSS...

CVE-2025-30208_POC

Scan without proxy python3 poc.py -f urls.txt Scan with proxy python3 poc.py -f urls.txt --proxy http://127.0.0.1:8080...

martian

Martian Proxy Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: Verify that all or some subset of requests are secure Mock external services at the network layer Inject headers, modify cookies or perform other mutations of...

CVE-2026-111927

Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyByHostname whose SIMILAR TO pattern performs a prefix match, so any domain that is a string prefix of a workspace-proxy access URL is trust...

CVE-2026-111931

The Coder software (versions 2.0.0 before 2.34.8 ) contains an open redirect vulnerability in the handleAPIKeySmuggling function. The root cause is the use of unsanitized r.URL.Path values , which allows an attacker to craft links on trusted workspace app subdomains using paths starting with doub...

CVE-2026-111931 Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which becom...

CVE-2026-111931 Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which becom...

CVE-2026-111931 Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which becom...

EUVD-2026-103294

Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyByHostname whose SIMILAR TO pattern performs a prefix match, so any domain that is a string prefix of a workspace-proxy access URL is trust...

test-cve-2025-29927

Test app to exploit CVE-2025-29927 The NextJS app has cookie based authentification and a middleware to prevent unauthorized access to /admin page. To start the app run yarn then yarn dev To get unauthorized access to /admin page by using CVE-2025-29927 vulnerability run a proxy-server which adds...

POC-CVE-2023-32681

POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...

CVE-2023-25690_lab

HTTP Request Smuggling via Apache proxy Environment Setup Infrastructure Component| Role| Version ---|---|--- Apache HTTP Server| Reverse Proxy| 2.4.55 vulnerable Spring Boot embedded Tomcat| Backend API| 4.x Java 21 SQLite| Database| — User ──► Apache :80 Proxy ──► Spring Boot :8080 Backend ──►...

tunnelx

TunnelX TunnelX is a lightweight ingress tunneling tool designed to create a secure SOCKS5 proxy server for routing network traffic. TunnelX is created for enabling internal network scanning from the ProjectDiscovery platform, ensuring a seamless and isolated connection. Features Secure network...

aigate

aigate Secret hygiene for AI-generated code. Catches hardcoded credentials in prompts, tool inputs, generated code, and existing files. Quick start pip install aigate && aigate setup-all That's it. This installs a background proxy redact mode, a PostToolUse hook for file scanning, and registers t...

AgentGuard

AgentGuard Zero-trust sandbox for autonomous AI agents. AgentGuard wraps any AI agent LangChain, CrewAI, AutoGen, custom scripts with safety rails. One command change: Before dangerous — agent has full system access python myagent.py After sandboxed agentguard run -- python myagent.py AgentGuard...