apache-cve-2021-41773-lab

Laboratorio de Path Traversal en Apache 2.4.49 — CVE-2021-41773 Clonar root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Uso Iniciar el servidor vulnerable: root@kitploit: ./apachelab.sh elige la opción 1 Explo...

ZeroShell <= 1.0beta11 Remote Code Execution

ZeroShell 1.0beta11 and earlier via cgi-bin/kerbynet allows remote attackers to execute arbitrary commands through shell metacharacters in the type parameter in a NoAuthREQ x509List action. id: CVE-2009-0545 info: name: ZeroShell = 1.0beta11 Remote Code Execution author: geeknik severity: critica...

exploitdb-bin-sploits

El nuevo repositorio se puede encontrar aquí: https://gitlab.com/exploit-database/exploitdb-bin-sploits...

Linux-CopyFail-C-Version-CVE-2026-31431

Linux CopyFail- Versión en C - CVE-2026-31431 Versión limpia en C de Copy Fail CVE-2026-31431: exploit de escalada de privilegios local en Linux que utiliza la primitiva AFALG + authencesn + splice. Sobrescribe la caché de páginas de /usr/bin/su con un pequeño shellcode setuid para obtener...

CVE-2026-31431-rs

PoC CVE-2026-31431 copyfail Estructura root@kitploit: src/ ├── main.rs Exploit: AFALG + splice para sobrescribir /bin/su └── bin/ └── payload.rs Payload Binarios nostd autocontenidos con cero dependencias en tiempo de ejecución: poc-rs: 4.1 KB payload incrustado mediante includebytes! payload: 1....

cve-2021-42013

Apache 2.4.50 - 路径遍历或远程代码执行 CVE-2021-42013.py 是一个 Python 脚本，可帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。我们提供了一个存在漏洞的 Docker 实例，供您动手实践 CVE-2021-42013。 如果启用了 CGI-BIN，我们可以执行远程代码执行，但无法进行路径遍历，因此为了检测路径遍历漏洞，已在 httpd.conf 的 Alias 部分下添加了“icons”目录。 httpd.conf 中的易受攻击配置 root@kitploit: 1. 启用 CGI-BIN 2. 在 Alias...

cve-2026-31431

CVE-2026-31431 Este documento describe un exploit público en Python relacionado con la vulnerabilidad CVE-2026-31431. El código demuestra la explotación de la falla utilizando primitivas del subsistema AFALG de Linux, operaciones de cifrado AEAD y manipulación de memoria mediante splice, con el...

cve-2021-41773

Apache 2.4.49 - Path Traversal o Ejecución Remota de Código cve-2021-41773.py es un script de Python que te ayudará a encontrar la vulnerabilidad de Path Traversal o Ejecución Remota de Código en Apache 2.4.49. Se proporciona una instancia vulnerable de Docker para que te pongas manos a la obra c...

cve-2021-42013

Apache 2.4.50 - 路径遍历或远程代码执行 CVE-2021-42013.py 是一个 Python 脚本，可帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。我们提供了存在漏洞的 Docker 实例，方便您动手实践 CVE-2021-42013。 如果启用了 CGI-BIN，则可以执行远程代码执行，但无法进行路径遍历，因此我们在 httpd.conf 的 Alias 部分下添加了 "icons" 目录，用于检查路径遍历漏洞。 httpd.conf 中的易受攻击配置 root@kitploit: 1. Enable CGI-BIN 2. Add "icon...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Apache HTTP服务器中的路径遍历零日漏洞被利用 Apache HTTP服务器CVE-2021-41773在野外被利用 CVE-2021-42013: Apache HTTP服务器2.4.49和2.4.50中的路径遍历与远程代码执行（CVE-2021-41773的不完整修复） Shodan 一行命令 root@kitploit: shodan search Apache Server 2.4.49 | awk 'print $1":"$2' | while read host do ; do curl --silent...

CVE-2021-41773

Exploit PoC de CVE-2021-41773 con configuración Docker. Navega al directorio que contiene la configuración de Apache y el Dockerfile compartido en el repositorio. Construyendo la imagen: docker build -t cve-2021-41773:1.0 . Ejecutando la imagen Docker: docker run --rm -d -p 4444:80...

cve-2021-42013.get

Apache 2.4.50 - 路径遍历或远程代码执行 cve-2021-42013.py 是一个 Python 脚本，用于帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。我们提供了存在漏洞的 Docker 实例，以便您动手实践 CVE-2021-42013 如果启用了 CGI-BIN，那么我们可以执行远程代码执行，但不能执行路径遍历，因此我们在 httpd.conf 的 Alias 部分下添加了 "icons" 目录，用于检查路径遍历漏洞。 httpd.conf 中的漏洞配置 root@kitploit: 1. Enable CGI-BIN 2. Add...

cve-2021-42013

Apache 2.4.50 - 路径遍历或远程代码执行 cve-2021-42013.py 是一个 Python 脚本，可帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。文中提供了易受攻击的 Docker 实例，供您动手实践 CVE-2021-42013 如果启用了 CGI-BIN，则可以执行远程代码执行，但无法进行路径遍历；因此，在 httpd.conf 的 Alias 部分中添加了“icons”目录，用于检查路径遍历漏洞。 httpd.conf 中的易受攻击配置 root@kitploit: 1. Enable CGI-BIN 2. Add "icons"...

CVE-2026-75163

An information disclosure vulnerability in the ugw-deviceinfo method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 returns detailed system version fields operatingsystem, gatewayversion to any authenticated user, including users with the low-privileged Standard role...

Malicious code in vitest-cli-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1262dc722ebac3b91301efde91e61df9ec9f65ccf91e51c15da53f9b518878b2 Package published as vitest-cli-pro ships a verbatim copy of nodemailer as cover; its declared postinstall runs lib/utils/index.js, which detaches a...

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

Summary mcp-shell ships a default Docker configuration security.yaml that includes /bin/bash in the allowedexecutables allowlist. The command validator security.go only checks whether the first token of the supplied command matches an allowed executable; it does not inspect or reject shell...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ath11k: mhi: use mhisyncpowerup If amss.bin is missing, ath11k will crash during the ‘rmmod ath11kpci’ command. The reason for this is that we were using mhipowerup, which does not check for any errors. However, mhisyncpowerup do...

Astra Linux – Vulnerability in TeXeVe-Bin

LuaTeX prior to version 1.17.0 allowed the execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because the luatex-core.lua file allows access to the io.popen function. This issue also affects TeX Live prior to version 2023 r66984 and MiKT...

CVE-2026-19976

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

EUVD-2026-60036

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...