6194 matches found
squid
SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...
CVE-2025-62168
CVE-2025-62168 Раскрытие информации в Squid Proxy при обработке ошибок Сканер Обнаружение и PoC «Из-за сбоя при редактировании учетных данных HTTP-аутентификации Squid подвержен атаке с раскрытием информации. Серьезность: Эта проблема позволяет скрипту обойти защиту безопасности браузера и узнать...
CVE-2025-62168
CVE-2025-62168 Раскрытие информации в Squid Proxy при обработке ошибок Сканер Обнаружение и PoC "Из-за сбоя при редактировании учётных данных HTTP-аутентификации Squid уязвим к атаке с раскрытием информации. Серьёзность: Эта проблема позволяет скрипту обойти защиту браузера и узнать учётные данны...
CVE-2016-2569
Приветствую, Спасибо, что читаете мою первую запись в блоге. Сегодня мы займёмся созданием эксплойта для одного из инструментов с открытым исходным кодом — кэширующего прокси-сервера Squid. Итак, что такое Squido? Squid — это кэширующий прокси для веба, поддерживающий HTTP, HTTPS, FTP и другое. О...
CVE-2018-19131
CVE-2018-19131 Демо Автор: Jonathan M. Wilbur Год авторского права: 2018 Лицензия: MIT License Не делайте ничего незаконного с этим. Это не вредоносное ПО. Это всего лишь proof-of-concept. Это демонстрация CVE-2018-19131, которая запускается в приложении Docker Compose. Данный проект собирает Squ...
squidmagic
Squidmagic은 Squid 프록시 서버와 Spamhaus를 사용하여 웹 기반 네트워크 트래픽을 분석하고 중앙 명령 및 제어C&C 서버와 악성 사이트를 탐지하도록 설계된 도구입니다. 의존성 설치 root@kitploit: pip install -r requirements.txt 사용법 root@kitploit: python squidmagic.py /squid/access.log | | | | / |/ | | | | |/ | ' \ / |/ | |/ | \ \ | | || | | | | | | | | | | | | | |...
Squid Proxy - HTTP Authentication Credentials Disclosure
Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...
Blackash-CVE-2025-54574
🛑 CVE-2025-54574 — Squid≤ 6.3의 힙 버퍼 오버플로 🛑 심각도: 치명적 CVSS 9.3 영향을 받는 소프트웨어: Squid 프록시버전 6.3 이하 취약점 유형: 힙 기반 버퍼 오버플로 발견 위치: URNUniform Resource Name 처리 영향: 원격 코드 실행 또는 서비스 거부 가능, 인증 없이 네트워크를 통해 악용 가능 🔍 문제는 무엇인가요? 이 결함은 Squid가 URN 응답을 구문 분석하는 과정에서 발생합니다. 부적절한 메모리 처리는 힙 오버플로를 유발하며, 악의적인 HTTP 응답이 메모리를...
CVE-2026-47729
🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed's ancient cousin, hiding in Squid since 1997. ✨ Features Single-file PoC — Zero dependencies Malicious FTP server mimicking NetWare banner + truncated LIST response Real-time detection and decoding of Basic Auth + Bearer tokens Multi-threaded heap...
CVE-2025-62168
CVE-2025-62168 — Утечка токена Squid Proxy PoC Автор не несет ответственности за неправомерное использование или ущерб, причиненный данным инструментом. Исследование предоставляется исключительно в образовательных и защитных целях. Описание Этот репозиторий содержит Proof-of-Concept PoC для...
CVE-2025-54574-Squid-Heap-Buffer-Overflow
CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerabilità trovata su Squid Proxy. CVE-2025-54574 — Overflow critico del buffer heap in Squid Proxy Questo repository documenta il processo di scoperta, analisi e divulgazione responsabile di CVE-2025-54574, un overflow critico del buffer heap in Squid...
ROOT-OS-DEBIAN-12-CVE-2026-47729 CVE-2026-47729 in squid - Patched by Root
Root has patched CVE-2026-47729 in the squid package for Root:Debian:12. Multiple fixed versions available...
Astra Linux – Vulnerability in Squid
Squid is a caching proxy for the Web. Prior to version 7.5, due to heap use-after-free issues, Squid was vulnerable to Denial of Service attacks when handling ICP traffic. This vulnerability allowed a remote attacker to carry out a reliable and repeatable Denial of Service attack on the Squid...
Astra Linux – Vulnerability in Squid
A issue was discovered in Squid 4.x before 4.15, and in 5.x before 5.0.6. If a remote server sends a certain response header via HTTP or HTTPS, it can lead to a denial of service. This header can potentially appear in legitimate network traffic...
Astra Linux – Vulnerability in Squid
Squid is a caching proxy for the web that supports HTTP, HTTPS, FTP, and other protocols. A bug related to incorrect checking of function return values makes Squid vulnerable to Denial of Service attacks targeting its helper process management. This bug has been fixed in Squid version 6.5. Users...
Astra Linux – Vulnerability in Squid
A issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, sensitive information about clients using the proxy may be exposed through an HTTPS request to an internal cache manager URL. This issue has been fixed in version 5.7...
Astra Linux – Vulnerability in Squid
Squid is a caching proxy for the web that supports HTTP, HTTPS, FTP, and other protocols. Due to an out-of-bounds write vulnerability when assigning ESI variables, Squid is susceptible to a memory corruption error. This error can lead to a denial-of-service attack...
Astra Linux – Vulnerability in Squid
A vulnerability was discovered in Squid before versions 4.15 and 5.x before version 5.0.6. Due to incorrect parser validation, this vulnerability allows for a Denial of Service attack against the Cache Manager API. This enables a trusted client to trigger memory leaks, which over time can lead to...
Astra Linux – Vulnerability in Squid
Squid is a caching proxy for the Web that supports HTTP, HTTPS, FTP, and other protocols. Due to a NULL pointer dereference bug, Squid is vulnerable to Denial of Service attacks targeting its Gopher gateway. The Gopher protocol was always available and enabled in Squid prior to Squid 6.0.1...
Astra Linux – Vulnerability in Squid
SQUID is vulnerable to HTTP request smuggling, which is caused by the laxity of the chunked decoder. This allows a remote attacker to perform Request/Response smuggling beyond the firewall and frontend security systems...