Apache-Authentication-Flaw-Research-CVE-2024-38476-

🛡️ Apache Authentication Flaw Research CVE-2024-38476 Prepared By: Abanoub Ehab 🛡️ Huawei Telecommunications Student Club - AOU A comprehensive technical research paper on the semantic ambiguity vulnerability in Apache HTTP Server and its impact on backend response handling. 📝 Abstract...

CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 SSL Certificate Validation Bypass Scanner This repository contains a Python-based proof-of-concept PoC script to detect CVE-2024-40898, a vulnerability in Apache HTTP Server that allows attackers to bypass SSL certificate verification. Overview CVE-2024-40898 is a security issue in...

CVE-2021-40438

CVE-2021-40438 Requesting a uri-path can cause modproxy to forward the request to an origin server selected by a remote user. This issue affects Apache HTTP Server 2.4.48 and earlier versions. Attackers can exploit this vulnerability by crafting a request with a uri-path, which causes modproxy to...

CVE-2024-47167-Environment-Setup

Components: 1. gradiocontainer: hosts internal HTTP server on port 5678 2. targetinternalserver: launches a python app using vulnerable version of gradio 4.40.0...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — Critical Security Vulnerability 😈 🚨 Severity CVSS Score: 10.0 / 10 Critical Published: January 20, 2026 Risk Level: 🔥 Maximum — immediate action recommended 🧠 What is it? A critical vulnerability affecting: Oracle HTTP Server Oracle WebLogic Server Proxy Plug-in for Apache & II...

apache-vulnerability-testing

Apache HTTP Server 脆弱性テストツール このリポジトリは、Apache HTTP Server のさまざまな脆弱性（ファイル名混乱攻撃、SSRF、サービス拒否、および最近のCVEに関連するその他の脆弱性）をテストするための Proof of Concept PoC を提供します。このツールは、サーバーが特定の種類の攻撃に対して脆弱かどうかを評価するために、細工されたHTTPリクエストを送信します。 特徴 複数の脆弱性をテストします。以下を含みます： CVE-2024-38472 : Windows上のApache HTTP ServerにおけるUNC SSRF...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

cve-2021-41773-lab

CVE-2021-41773 — Minimal FastAPI Lab A small, self-contained FastAPI lab demonstrating how decoding user input before validating filesystem boundaries can lead to directory traversal and local file inclusion LFI, modeled after the Apache HTTP Server issues CVE-2021-41773. Features Minimal,...

CVE-2021-41773

CVE-2021-41773 Docker root@kitploit: $ sudo docker build -t . $ sudo docker run -d -t -p 80:80 --name /bin/bash $ sudo docker exec -it ./bin/apachectl -k restart To access docker container for custom config file root@kitploit: $ docker exec -it /bin/bash file config in...

CVE-2021-41773

CVE-2021-41773 — Apache パストラバーサル & RCE エクスプロイト TryHackMe の 「Modern Web Stacks」 ルームの Writeup。modcgi が有効な場合にリモートコード実行へとつながる、Apache HTTP Server 2.4.49 のパストラバーサル脆弱性 CVE-2021-41773 の悪用に焦点を当てています。 概要...

cve-2021-41773-source-code-analysis

Apache HTTP Server CVE-2021-41773 Source Code Analysis A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 Apache HTTP Server Path Traversal by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner A Python-based detection tool for CVE-2024-40725 , an Apache HTTP Server source code disclosure vulnerability affecting versions 2.4.0 and 2.4.61. Legal notice: Only run this scanner against servers you own or have explicit written authorization to test. Unauthorized use ma...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner...

CVE-2024-40725

HTTP Request Smuggling Detection Tool This repository contains a Python-based tool to detect HTTP Request Smuggling vulnerabilities, specifically targeting CVE-2024-40725. The tool attempts to exploit this vulnerability in Apache HTTP Server by sending crafted HTTP requests and analyzing the...

CVE-2021-41773

CVE-2021-41773 Usage root@kitploit: docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py root@kitploit: docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py What is CVE-2021-41773? CVE-2021-41773 Directory traversal vulnerability in Apache HTTP Server...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution. CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit versions 2.0.7 through 3.0.3. The issue resides in th...

CVE-2021-41773

CVE-2021-41773 This is a simple poc for Apache Path Traversal Vulnerability Vulnerable versions: Apache/2.4.49 Apache/2.4.50 with modcgi disabled...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Usage root@kitploit: python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com Reference...

apache2.4.49VulnerableLabSetup

apache2.4.49VulnerableLabSetup CVE-2021-41773，Apache HTTP 服务器 2.4.49 容易受到路径遍历和远程代码执行攻击。该仓库用于模拟该漏洞。...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE Apache HTTP Server 2.4.49 のパス正規化に対する変更に欠陥が見つかりました。攻撃者はパストラバーサル攻撃を利用して、Alias のようなディレクティブで設定されたディレクトリ外のファイルに URL をマッピングする可能性があります。これらのディレクトリ外のファイルが通常のデフォルト設定「require all denied」で保護されていない場合、リクエストは成功する可能性があります。さらに、これらのエイリアスパスで CGI...