Security update for python-urllib3

This update for python-urllib3 fixes the following issues: CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override bsc1283908. CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding bsc1283909. CVE-2026-97689: denial of service d...

SUSE-SU-2026:4703-1 Security update for libsoup2

This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...

R2Socks

R2Socks SOCKS5 proxy tunneled through Cloudflare R2 buckets. Client App ◄─SOCKS5─► Proxy ◄─── R2 Bucket ───► Agent ◄─TCP─► Target The proxy runs a local SOCKS5 server on the operator's machine. Every CONNECT request is serialized as binary packets and stored as R2 objects. The agent polls the sam...

CVE-2026-98418

A flaw was found in the Linux kernel's process scheduler. A local user can cause a Denial of Service DoS by initiating lock contention across processor cores with a task that has processor migration disabled. In this scenario, the scheduler incorrectly triggers a kernel warning when moving the...

ROOT-APP-NPM-CVE-2026-90711 CVE-2026-90711 in proxy-addr - Patched by Root

Root has patched CVE-2026-90711 in the proxy-addr package for Root:npm. Multiple fixed versions available...

proxy-workbench

Proxy Workbench Find proxies that work for the sites you use Collect addresses from public lists or your own files, check them against your services, and use the results in apps, exports, or scripts. Proxy Workbench runs locally with a browser interface, CLI, rotating proxy gateway, and API...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711:...

SUSE-SU-2026:4690-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711:...

BIT-ARGO-CD-2026-55797 Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are...

CVE-2026-16251

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

CVE-2026-16251

Mattermost versions 11.10.x <= 11.10.0 , 11.7.x <= 11.7.9 , 11.9.x <= 11.9.1 , and 11.8.x

CVE-2026-16251 Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

EUVD-2026-102750

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

DotNET_XorCryptor

DotNET XorCryptor You can also pay attention to an older project - NET-MalwareCryptor This is a .NET executable packer with payload encryption. Use for educational purposes only. How to use? --file path - specify file name --flood - add junk classes to file --proxy - move original entry point to...

CVE-2026-77711

A flaw was found in Eclipse Jetty's HttpClient. A malicious destination server can cause an information disclosure of proxy authentication credentials when client requests are routed through a forward proxy. By returning a proxy authentication challenge, the server misleads the client into...

pentestproxy

PentestProxy Scripts for building a Covert Pentesting Infrastructure using RedSocks and DNScrypt. Overview This repository contains a set of Bash scripts to assist in setting up a transparent proxy infrastructure. It routes traffic through a SOCKS5 proxy via RedSocks and encrypts DNS queries via...

CVE-2026-11114-Node.js-vm-Sandbox-Escape-via-Proxy

CVE-2026-11114 – Node.js vm Sandbox Escape via Proxy Program Code Node.js // sandboxserver.js - Vulnerable VM sandbox const vm = require'vm'; const express = require'express'; const app = express; app.useexpress.json; app.post'/eval', req, res = const code = req.body.code; const sandbox = console...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

dnscrypt-autoinstall

dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...

MITMf

MITMf Framework for Man-In-The-Middle attacks This project is no longer being updated. MITMf was written to address the need, at the time, of a modern tool for performing Man-In-The-Middle attacks. Since then many other tools have been created to fill this space, you should probably be...