689 matches found
CVE-2021-41773
Exploit PoC de CVE-2021-41773 con configuración Docker. Navega al directorio que contiene la configuración de Apache y el Dockerfile compartido en el repositorio. Construyendo la imagen: docker build -t cve-2021-41773:1.0 . Ejecutando la imagen Docker: docker run --rm -d -p 4444:80...
CVE-2021-41773
CVE-2021-41773 Uso docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py ¿Qué es CVE-2021-41773? CVE-2021-41773 Vulnerabilidad de directory traversal en Apache HTTP Server 2.4.49. Ocurre cuando no se h...
CVE-2026-103276
Ghost versions before 6.20.0 are vulnerable to a file extension filtering bypass that allows unauthenticated attackers to read theme templates and metadata . The root cause is an insufficient validation of file extensions, which can be circumvented using URL encoding . This allows unauthorized ac...
CVE-2026-103276 Ghost before 6.20.0 File Read via URL Encoding Bypass
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files...
CVE-2026-103276 Ghost before 6.20.0 File Read via URL Encoding Bypass
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files...
CVE-2026-103276 Ghost before 6.20.0 File Read via URL Encoding Bypass
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files...
CVE-2023-32315-EXPLOIT
CVE-2023-32315 - Bypass de Autenticación en Openfire Este repositorio destaca un problema de seguridad grave que afecta a varias versiones de Openfire. Openfire, un servidor de colaboración en tiempo real multiplataforma que utiliza el protocolo XMPP desarrollado por la comunidad Ignite Realtime,...
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
Overview On September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding CWE-177. An...
CVE-2021-42013
CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi patch bypass For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate CVE-2021-42013 , present in Apache HTTP Server 2.4.50. This CVE is the bypass of the patch...
Weblogic_Unauthorized-bypass-RCE
CVE-2020–14882 Bypass no autorizado RCE de Weblogic CVE-2020-14882 Script de prueba de bypass no autorizado RCE de Oracle Weblogic Funciona en Python3 Solicitudes POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537....
CVE-2021-41773
Zona de pruebas CVE-2021-41773 Esta es una pequeña receta de Docker para configurar un contenedor basado en Debian bookworm con una instancia de Apache HTTPd 2.4.49 vulnerable a CVE-2021-41773. El CGI se ha habilitado explícitamente para probar/verificar tanto el comportamiento de divulgación de...
Scanner-CVE-2021-41773
Scanner-CVE-2021-41773 Un escáner automático para Apache 2.4.49 • ejecutar: go run main.go O go build main.go && ./main • puedes personalizar tu payload • los hosts vulnerables se guardan Crea tu laboratorio: 1. Descargar imagen: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Ejecutar...
ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor...
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 CVSS score: 9.8, a critical security flaw that could resul...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core
Summary IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core Vulnerability Details CVEID:CVE-2026-59083 DESCRIPTION: Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations...
Improper Handling of URL Encoding (Hex Encoding)
Overview Affected versions of this package are vulnerable to Improper Handling of URL Encoding Hex Encoding in validateuri and parsesrv, which apply unquoteplus to the entire host section of a connection string before splitting it on , and :, so a percent-encoded delimiter decodes into a real one...
CVE-2026-96748: Improper Handling of URL Encoding (Hex Encoding)
PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...
wildfly-elytron-realm-token: parameter injection in EAP's elytron oauth2
A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...
wildfly-elytron-realm-token: parameter injection in EAP's elytron oauth2
A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...
