2665 matches found
PT-2026-89452
Name of the Vulnerable Software and Affected Versions Traefik versions 3.2.0 through 3.7.12 Description Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but fail to inspect req.Trailer. This allows an unauthenticated client to...
CVE-2026-73276
A flaw was found in the Erlang/OTP inets httpd server. This vulnerability allows a remote attacker to perform HTTP Request Smuggling due to the server silently dropping HTTP headers that contain whitespace between the header field-name and the colon. When deployed behind a reverse proxy that...
CVE-2026-84186
Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the clientβs IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...
EUVD-2026-72305
Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the clientβs IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...
CVE-2026-84186
This vulnerability affects PrestaShop and resides in the Tools::getRemoteAddr() function. When the application runs behind a reverse proxy, load balancer, or CDN, it incorrectly trusts the client-supplied X-Forwarded-For header instead of the IP provided by the trusted infrastructure, allowing an...
CVE-2026-84186 Incorrect access control in PrestaShop
Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the clientβs IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...
CVE-2026-84186 Incorrect access control in PrestaShop
Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the clientβs IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...
CVE-2026-84186: Authentication Bypass by Spoofing
Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the clientβs IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...
SUSE CVE-2026-71324
Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream through a shared net/http.Transport. When the upstream answers the CONNE...
SUSE CVE-2026-71326
Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...
SUSE CVE-2026-71327
Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and...
EUVD-2026-57410
SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy...
CVE-2026-73812
A flaw was found in the inets httpd server, part of Erlang/OTP. The server incorrectly processes HTTP requests that contain both Transfer-Encoding: chunked and Content-Length headers, failing to reject them or close the connection as required by RFC 9112 Β§6.1. When inets is deployed behind a...
The vulnerability of the intermediate software, StripPrefix of the Containous Traefik reverse proxy server, allows attackers to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the intermediate software program StripPrefix of the Containous Traefik reverse proxy server relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions and gain...
RHEL 10 : golang-github-openprinting-ipp-usb (RHSA-2026:62631)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62631 advisory. HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-U...
OTP: inets: inets: HTTP Request Smuggling allows bypassing security controls
A flaw was found in the inets httpd server, part of Erlang/OTP. The server incorrectly processes HTTP requests that contain both Transfer-Encoding: chunked and Content-Length headers, failing to reject them or close the connection as required by RFC 9112 Β§6.1. When inets is deployed behind a...
ALSA-2026:62631 Important: golang-github-openprinting-ipp-usb security update
HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go...
bunkerweb v1.6.15-rc1
π Website | π€ Panel | π Documentation | π¨βπ» Demo | π± Demo UI | 𧩠Templates | π‘οΈ Examples π¬ Chat | π Forum | π Community | πΊοΈ Threatmap | π Status | π Feedback π‘οΈ Make security by default great again! BunkerWeb Bun...
CVE-2021-31188
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:42+00:00| seen| https://t.me/hackingAttack/8312 2026-09-02 01:03:18+00:00| seen| https://t.me/hackingAttack/8312 2026-09-08 07:00:05+00:00| seen| https://t.me/hackingAttack/8312 2026-09-09 00:00:39+00:00| seen|...
pingap v0.13.10
pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...