138633 matches found
CVE-2026-57941
A flaw was found in the modhttp2 module of Apache HTTP Server. A remote, unauthenticated attacker could exploit a use-after-free condition—where memory is accessed after being released—through re-entrant processing of shared session buffers. This flaw can allow an attacker to potentially execute...
Security Bulletin: IBM App Connect Enterprise is affected by multiple vulnerabilities in Eclipse Jetty (CVE-2026-8384 and CVE-2026-19203)
Summary IBM App Connect Enterprise Toolkit is affected by multiple vulnerabilities in Eclipse Jetty. Vulnerability Details CVEID:CVE-2026-8384 DESCRIPTION: In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instea...
h2buster
h2buster v0.4d Un escáner rápido, con hilos, recursivo, de fuerza bruta para directorios web sobre HTTP/2 usando hyper, inspirado en Gobuster. Características Rápido y portátil: instala hyper y ejecuta. Escaneo multiconxión. Conexiones multihilo. Escalable: los escaneos pueden ser tan dóciles o...
aquatone
AQUATONE Aquatone es una herramienta para la inspección visual de sitios web a través de una gran cantidad de hosts y es conveniente para obtener rápidamente una visión general de la superficie de ataque basada en HTTP. Instalación 1. Instale el navegador Google Chrome o Chromium -- Nota: Google...
pathprober
pathprober Descubre y sondea rutas HTTP usando metodología de fuerza bruta y filtrado por una palabra específica o dos palabras a la vez. Propósito Forzar directorios web o rutas HTTP y validar usando el código de respuesta HTTP ya no es relevante. Esta herramienta te ayudará a realizar una prueb...
cgit < 1.2.1 - Directory Traversal
cGit 1.2.1 via cgitcloneobjects has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request. id: CVE-2018-14912 info: name: cgit 1.2.1 - Directory Traversal author: 0xAkoko severity: high description: cGit...
CLEANSTART-2026-MY08631 By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service
Security vulnerability affects the apache2 package. By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service...
CLEANSTART-2026-MQ00302 specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-IK18722 specially crafted request could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted request could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-XO55123 maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A maliciously constructed HTTP/2 request could cause modhttp2 in Apache HTTP Server 2...
CLEANSTART-2026-TI49446 HTTP strict parsing changes added in Apache httpd 2
Security vulnerability affects the apache2 package. The HTTP strict parsing changes added in Apache httpd 2...
CLEANSTART-2026-RR06957 When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2...
CLEANSTART-2026-ZI95703 In Apache HTTP server 2
Security vulnerability affects the apache2 package. In Apache HTTP server 2...
CLEANSTART-2026-ZG05293 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-KO94299 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-XV82454 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-QW58574 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-ZG87448 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...