CVE-2026-81735

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

ESFileExplorerOpenPortVuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447 As per their Google Play description: ES File Explorer File Manager is a full-featured file Images, Music, Movies, Documents, app manager for both local and networked use! With over 500 million users worldwide, ES File Explorer File Manager...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Description JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further...

-CVE-2021-44790

CVE-2021-44790 Description of CVE-2021-44790 CVE-2021-44790 describes a system-level security vulnerability in the modlua of the Apache HTTP Server, specifically in version 2.4.51 and earlier versions. This vulnerability is triggered when the r:parsebody function improperly handles HTTP...

CVE-2026-81735

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

cve-2021-41773

Cve-2021-41773-grabber Path-Traversal- und Datei-Offenlegungsschwachstelle in Apache HTTP Server 2.4.49 Dieses Skript erfasst anfällige Server für CVE-2021-41773 von Shodan. Verwendung: Python 3 verwenden Shodan-Modul installieren: pip install shodan Ändere das Schlüsselwort im Skript auf dein...

Apache-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Contributors 이희수@lheeeesoo Apache HTTP Server 2.4.49 में URL पथ को सामान्य करने normalize की प्रक्रिया में एन्कोडेड पैरेंट पथ को ठीक से ब्लॉक न करने की कमजोरी है। हमलावर .%2e जैसे मानों का उपयोग करके वेब सर्वर द्वारा सार्वजनिक करने के लिए निर्धारित...

cve-2021-41773-v-

Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...

cve-2021-41773

Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...

CVE-2021-41773m

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2021-41773h

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...

CVE-2021-41773-PoC

CVE-2021-41773-PoC PoC for CVE-2021-41773 with docker to demonstrate Run Just run ./poc.sh. Make sure you have working docker and docker-compose root@kitploit: $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2019-10092

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...

CVE-2010-5301

CVE-2010-5301 Ein Proof of Concept für einen SEH-Überlauf mit beliebiger DLL-Injektion Beschreibung Kolibrì HTTP Server 2.0 ist von einem stapelbasierten Pufferüberlauf betroffen. Zum Zeitpunkt der Entdeckung wurde diese Schwachstelle ausgenutzt, indem einfach der Instruction Pointer mit einer...

Apache-CVE-2026-23918-fix

Apache HTTP Server: http2: प्रारंभिक रीसेट पर डबल फ्री और संभावित RCE CVE-2026-23918। Apache HTTP Server में HTTP/2 प्रोटोकॉल के साथ डबल फ्री और संभावित RCE भेद्यता। यह समस्या Apache HTTP Server: 2.4.66 को प्रभावित करती है। उपयोगकर्ताओं को संस्करण 2.4.67 में अपग्रेड करने की अनुशंसा की जाती है, जो...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ أداة استخبارات واستطلاع احترافية لثغرة Apache HTTP/2 Double-Free. 📌 نظرة عامة CVE-2026-23918 CVSS 8.8 هي ثغرة حرجة في تلف الذاكرة في Apache HTTP Server 2.4.66. صُمم هذا المدقّق لتحديد بصمة الأهداف بأمان وتقييم مدى التعرض للخطر، خاصة في البيئات التي تكون فيها سلاسل...

CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC

Achten Sie in Echtzeit auf den Double-Free-Fehler sudo tail -f /usr/local/apache2-vuln/logs/errorlog | grep -i "double free|exit signal" Führen Sie den PoC aus python3 /cve-2026-23918-poc.py localhost 9443...

CVE-2026-23918-test

CVE-2026-23918-test Dieses Repository enthält einen Proof of Concept PoC, der die Double-Free-Schwachstelle CVE-2026-23918 im Apache HTTP Server 2.4.66 modhttp2 demonstriert. Die Schwachstelle beruht auf einer Race Condition während der frühen Verarbeitung von RSTSTREAM-Frames. Ich habe mich auf...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - Exploração de LFI & RCE Informações root@kitploit: Título do Exploit: Apache HTTP Server 2.4.49 - Path Traversal & Execução Remota de Código RCE Autor do Exploit: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Página do Fornecedor: https://apache.org/...