488 matches found
EKFiddle
EKFiddle v.1.2.6 An extension/rules for the Fiddler Classic web debugger to analyze malicious web traffic. Fiddler Classic Installation Download and install Fiddler from here: https://www.telerik.com/fiddler Download and run EKFiddleExtension.exe Alternatively, download EKFiddle.dll and put it in...
burpgpt
!IMPORTANT Annonce du lancement de BurpGPT Pro, l'édition spécialement conçue pour répondre aux besoins des professionnels et des cyber-boutiques. Découvrez une multitude de fonctionnalités puissantes et une interface conviviale qui améliore vos capacités et garantit une expérience utilisateur...
betwixt
سيساعدك Betwixt في تحليل حركة مرور الويب خارج المتصفح باستخدام واجهة Chrome DevTools المألوفة. التثبيت قم بتنزيل أحدث إصدار لنظام التشغيل الخاص بك، أو أنشئ حزمتك الخاصة أو شغّل Betwixt من الكود المصدري. الإعداد من أجل التقاط حركة المرور، ستحتاج إلى توجيهها إلى الوكيل الذي أنشأه Betwixt في الخلفية...
web-traffic-generator
web-traffic-generator مولد حركة مرور HTTP/S "عضوي" سريع وغير مرتب. حول مجرد سكربت Python بسيط مكتوب بشكل سيء يتصفح الإنترنت بلا هدف عن طريق البدء من ROOTURLS محددة مسبقًا والنقر عشوائيًا على الروابط في الصفحات حتى يتم الوصول إلى MAXDEPTH المحدد مسبقًا. أنشأت هذا كمولد ضوضاء لاستخدامه في محاكاة...
web-traffic-generator
مولد حركة المرور على الويب مولد حركة مرور HTTP/S سريع وقذر و"عضوي". حول مجرد نص بايثون بسيط مكتوب بشكل سيء يتصفح الإنترنت بدون هدف عن طريق البدء من ROOTURLS محددة مسبقًا والنقر عشوائيًا على الروابط في الصفحات حتى يتم الوصول إلى MAXDEPTH المحدد مسبقًا. أنشأت هذا كمولد ضوضاء لاستخدامه في محاكاة...
tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulation
A flaw was found in Apache Tomcat. This vulnerability, caused by a race condition during concurrent execution, allows an attacker to inject unauthorized data, known as trailer fields, into another user's HTTP/2 request. This could lead to the manipulation of web traffic or unintended information...
CVE-2026-87626
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors. The attackers named the implant ted in debug strings left in the...
CVE-2026-16792
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-16792 Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-18753
CVE-2026-18753 concerns GV-AS1620 Controller Firmware (GV-ASManager). The firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this private key allows attackers to decrypt HTTPS traffic and spoof the server, compromising confidenti...
CVE-2026-16504
The VPS.org one-click Zulip template contains multiple vulnerabilities due to the use of static templates without per-deployment randomization. Specifically, the template deploys with a hardcoded application signing key (secret_key: changeme ), a default database password (zulip ), and the config...
EUVD-2026-46858
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content:...
EUVD-2026-46804
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...
CVE-2026-53727
Summary: Multiple sources confirm a vulnerability in css_parser prior to 3.0.0 where CssParser::Parser#read_remote_file, Parser#load_uri!, and Parser#add_block! follow HTTP(S) redirects and even service file:// URIs without proper host/scheme filtering, enabling SSRF to internal hosts and potenti...
CVE-2026-35146 HCL DFXServer is affected by an Unencrypted Communication vulnerability.
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user...
MAL-2026-10165 Malicious code in @injectivelabs/sdk-ts (npm)
@injectivelabs/[email protected] published 2026-07-08 20:59 UTC contains a wallet-credential stealer disguised as "key derivation telemetry". A file packages/sdk-ts/src/utils/key-derivation-telemetry.ts plus a hook added to packages/sdk-ts/src/core/accounts/PrivateKey.ts capture wallet secrets durin...
PYSEC-2026-1596 HTTP/HTTPS Traffic Interception Bypass in mad-proxy
A vulnerability in mad-proxy versions = 0.3 allows attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic...
Malicious Package
Overview @glitchpad/throttler is a malicious package. This package contains malicious code and is part of a coordinated npm supply-chain campaign. It ships an obfuscated postinstall payload that downloads and executes a Rust-compiled infostealer binary. Impact The infostealer targets crypto...
