betwixt

Betwixt поможет вам анализировать веб-трафик вне браузера, используя знакомый интерфейс Chrome DevTools. Установка Скачайте последний релиз для вашей операционной системы, создайте свой собственный пакет или запустите Betwixt из исходного кода. Настройка Чтобы захватывать трафик, вам нужно...

EKFiddle

EKFiddle v.1.2.6 Расширение/правила для веб-отладчика Fiddler Classic для анализа вредоносного веб-трафика. Fiddler Classic Установка Загрузите и установите Fiddler отсюда: https://www.telerik.com/fiddler Загрузите и запустите EKFiddleExtension.exe В качестве альтернативы загрузите EKFiddle.dll и...

web-traffic-generator

web-traffic-generator Быстрый и грязный генератор "органического" HTTP/S трафика. О программе Простой плохо написанный скрипт на Python, который бесцельно "бродит" по интернету, начиная с предопределённых ROOTURLS и случайным образом "кликая" по ссылкам на страницах, пока не будет достигнута...

web-traffic-generator

web-traffic-generator 빠르고 조잡한 HTTP/S "유기적" 트래픽 생성기입니다. 개요 그저 사전 정의된 ROOTURLS에서 시작해 페이지의 링크를 무작위로 "클릭"하며 사전 정의된 MAXDEPTH에 도달할 때까지 인터넷을 멍하니 "서핑"하는 단순한제대로 작성되지 않은 Python 스크립트입니다. 침해 대응Incident Response / 네트워크 방어Network Defense 시뮬레이션에 사용할 노이즈 생성기로 만들었습니다. 유일한 문제는 제 시뮬레이션 환경에 여러 대의 IDS/IPS/NGFW 장비가 있어...

burpgpt

!ВАЖНО Объявляем о запуске BurpGPT Pro — редакции, специально разработанной для удовлетворения потребностей профессионалов и кибер-бутиков. Откройте для себя множество мощных функций и удобный интерфейс, который расширяет ваши возможности и обеспечивает оптимальный пользовательский опыт. Чтобы...

tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulation

A flaw was found in Apache Tomcat. This vulnerability, caused by a race condition during concurrent execution, allows an attacker to inject unauthorized data, known as trailer fields, into another user's HTTP/2 request. This could lead to the manipulation of web traffic or unintended information...

CVE-2026-87626

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-16792

An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...

CVE-2026-16792 Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator

An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...

CVE-2026-18753

CVE-2026-18753 concerns GV-AS1620 Controller Firmware (GV-ASManager). The firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this private key allows attackers to decrypt HTTPS traffic and spoof the server, compromising confidenti...

CVE-2026-16504

The VPS.org one-click Zulip template contains multiple vulnerabilities due to the use of static templates without per-deployment randomization. Specifically, the template deploys with a hardcoded application signing key (secret_key: changeme ), a default database password (zulip ), and the config...

EUVD-2026-46858

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content:...

EUVD-2026-46804

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

CVE-2026-53727

Summary: Multiple sources confirm a vulnerability in css_parser prior to 3.0.0 where CssParser::Parser#read_remote_file, Parser#load_uri!, and Parser#add_block! follow HTTP(S) redirects and even service file:// URIs without proper host/scheme filtering, enabling SSRF to internal hosts and potenti...

CVE-2026-35146 HCL DFXServer is affected by an Unencrypted Communication vulnerability.

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user...

MAL-2026-10165 Malicious code in @injectivelabs/sdk-ts (npm)

@injectivelabs/[email protected] published 2026-07-08 20:59 UTC contains a wallet-credential stealer disguised as "key derivation telemetry". A file packages/sdk-ts/src/utils/key-derivation-telemetry.ts plus a hook added to packages/sdk-ts/src/core/accounts/PrivateKey.ts capture wallet secrets durin...

PYSEC-2026-1596 HTTP/HTTPS Traffic Interception Bypass in mad-proxy

A vulnerability in mad-proxy versions = 0.3 allows attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic...

CVE-2026-10763

PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server...

CVE-2026-48491

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard...

samba: group policy certificate enrollment uses http:// without validation

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability t...