PT-2026-116495

Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.29.20 Coder versions 2.33.0 through 2.33.11 Coder versions 2.34.0 through 2.34.7 Coder versions 2.35.0 through 2.35.3 Description An improper hostname validation flaw exists in the GetWorkspaceProxyByHostname function...

Linux Distros Unpatched Vulnerability : CVE-2026-7767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-98418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched/core: Avoid false migration warning for proxy donors Proxy execution can move a blocke...

SUSE SLES12: libsoup-2_4-1 / libsoup-2_4-1-32bit / libsoup-devel / libsoup-lang / etc (SUSE-SU-2026:4690-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4690-1 advisory. - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header...

SeeProxy

SeeProxy Golang reverse proxy with CobaltStrike malleable profile validation. The premise of this tool is to not open your teamserver to the world but to a single instance of SeeProxy instead. This way every request reaching your teamserver is a legitimate C2 traffic. Example deployment Below you...

CVE-2026-67411

A flaw was found in rabbitmq-server. When native Message Queuing Telemetry Transport MQTT or MQTT over WebSockets operates behind a trusted proxy utilizing the PROXY protocol, the broker may drop the client IP address before enforcing user restriction checks. This failure causes external...

gofireprox

GoFireProx This is a port of FireProx to Golang Installation go install -v github.com/mr-pmillz/gofireprox/cmd/gofireprox@latest gofireprox as library Integrate gofireprox with other go programs package main import "fmt" "github.com/mr-pmillz/gofireprox" func main region := "us-east-1" fpClient,...

Roxy

Roxy Minimal terminal-based HTTP/HTTPS intercepting proxy. https://github.com/user-attachments/assets/94f9c9ae-5842-4b19-9f5b-84dedb9430e6 Features · Installation · HTTPS support · Usage · How it works Overview Roxy is a lightweight intercepting proxy for HTTP and HTTPS with a terminal user...

gori

Hack from the terminal. Installation • Usage • Documentation • Contributing gori 고리 — Korean for ring, link, loop sits in the loop between your client and its target, capturing every request and response as a flow you can replay, fuzz, and scan across HTTP/1.1, HTTP/2, WebSocket, gRPC, and SSE, a...

CVE-2026-20896

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...

CVE-2026-97380

A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statemen...

DEBIAN-CVE-2026-97380

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

CVE-2026-97380

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

CVE-2026-15409

🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE via WebSocket Proxy Proof‑of‑Concept exploit for CVE-2026-15409 – unauthenticated remote code execution on SonicWall SMA 1000 series appliances via the Erlang distribution protocol tunneled over WebSocket. 📖 Overview CVE-2026-15409 is a critical...

CVE-2026-97380 MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

CVE-2026-97380

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

CVE-2026-97380

The MariaDB server contains an authorization error in the GRANT PROXY statement affecting versions 10.6.1 through 10.6.28 , 10.11.19 , 11.4.13 , 11.8.9 , 12.3.3 , and 13.0.2 . The root cause is that an IDENTIFIED clause with an empty password is incorrectly treated as having no specified authenti...

voidsec-proxy

voidsec-proxy ██╗ ██╗ ██████╗ ██╗██████╗ ███████╗███████╗ ██████╗ ██║ ██║██╔═══██╗██║██╔══██╗██╔════╝██╔════╝██╔════╝ ██║ ██║██║ ██║██║██║ ██║███████╗█████╗ ██║ ╚██╗ ██╔╝██║ ██║██║██║ ██║╚════██║██╔══╝ ██║ ╚████╔╝ ╚██████╔╝██║██████╔╝███████║███████╗╚██████╗ ╚═══╝ ╚═════╝ ╚═╝╚═════╝...

Security update for python-urllib3

This update for python-urllib3 fixes the following issues: CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override bsc1283908. CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding bsc1283909. CVE-2026-97689: denial of service d...

SUSE-SU-2026:4703-1 Security update for libsoup2

This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...