709 matches found
squid
SQUID Web Proxy Cache http://www.squid-cache.org/ कॉपीराइट C 1996-2026 द स्क्विड सॉफ्टवेयर फाउंडेशन और योगदानकर्ता स्क्विड सॉफ्टवेयर GPLv2+ लाइसेंस के तहत वितरित किया जाता है और इसमें अनेक व्यक्तियों और संगठनों के योगदान शामिल हैं। कृपया विवरण के लिए COPYING और CONTRIBUTORS फ़ाइलें देखें। समर्थन ...
HTTPLeaks
HTTPLeaks ما هذا؟ يهدف هذا المشروع إلى تعداد جميع الطرق الممكنة التي يمكن لموقع ويب من خلالها تسريب طلبات HTTP. في ملف HTML واحد. انظر الملف leak.html نسخة النص الخام في جذر هذا المستودع. ما الفائدة منه؟ يمكنك استخدام هذا لاختبار متصفحك بحثًا عن تسريبات CSP ، وخدمة البريد الإلكتروني الخاصة بك بحث...
stegowiper
stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...
Artica Web Proxy 4.30 - OS Command Injection
Artica Web Proxy 4.30 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via servicecmdspeform. id: CVE-2020-17505 info: name: Artica Web Proxy 4.30 - OS Command Injection author: dwisiswant0...
WebFEET
Web Filter External Enumeration Tool WebFEET WebFEET Publié en open source par NCC Group Plc - http://www.nccgroup.com/ Développé par Ben Williams https://github.com/nccgroup/webfeet Publié sous licence AGPL, voir LICENSE pour plus d'informations WebFEET est une application web pour l'énumération...
scrying
NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...
UBUNTU-CVE-2026-71310
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.ReadResponse over an unrestricted buffered reader, allowing a malicious or...
rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory
Summary The shared HTTP CONNECT helper parses a proxy response with http.ReadResponse over an unrestricted buffered reader. The production helper accepted a valid response containing a 2 MiB header in three consecutive runs. A malicious or compromised configured proxy, or an active on-path actor...
CVE-2026-71310
The CVE affects the rclone project before version 1.75.0, where the shared HTTP CONNECT helper in lib/proxy/http.go incorrectly parses proxy CONNECT responses using http.ReadResponse over an unrestricted reader. This unbounded parsing enables a malicious or on-path proxy to send oversized headers...
CLSA-2026-1776299658 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.18.0-tuxcare.1...
Updated libvncserver packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Heap Out-of-Bounds Read in HandleUltraZipBPP due to unchecked subrectangle count. CVE-2026-32853 NULL pointer dereferences in httpd proxy handlers via malformed CONNECT/GET requests. CVE-2026-32854 LibVNCClient Tight Gradient decoding allows...
UBUNTU-CVE-2026-67320
axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable interceptor pattern such as ...config or...
UBUNTU-CVE-2026-67289
FreeRDP before 3.29.0 affected versions = 3.28.0 does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the...
EUVD-2026-51840
FreeRDP before 3.29.0 affected versions = 3.28.0 does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the...
CVE-2026-66339
A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials,...
PT-2026-64428
Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw exists where libsoup incorrectly attaches the Proxy-Authorization header to HTTPS requests sent through a CONNECT tunnel established via an HTTP proxy. This behavior allows the...
axios: Axios: Information disclosure of proxy credentials via redirect flows
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...
Updated rsync package fixes security vulnerabilities
The updated package fixes security vulnerabilities: Rsync 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write. CVE-2026-29518 Rsync 3.4.3 Authorization Bypass via Hostname Resolution. CVE-2026-43617 Rsync 3.4.3 Integer Overflow Information Disclosure. CVE-2026-43618 Rsync 3.4.3...
