CVE-2021-42013

CVE-2021-42013 Schwachstellen-Scanner Dieses Python-Skript prüft auf die Remote Code Execution RCE-Schwachstelle CVE-2021-42013 in Apache 2.4.50. Einführung Dieses Skript wurde entwickelt, um zu identifizieren, ob ein Server anfällig für die CVE-2021-42013 RCE-Schwachstelle in Apache 2.4.50 ist. ...

cve-2021-42013-apache

Installation und Ausführung des Skripts 💻 Voraussetzungen Bevor Sie beginnen, stellen Sie sicher, dass die folgenden Werkzeuge auf Ihrem Rechner installiert sind : Python 3.x Git pip zur Verwaltung von Python-Abhängigkeiten Installationsschritte 1. Repository klonen Verwenden Sie git, um das...

Apache-HTTP-Server-2.4.50-RCE

Apache-HTTP-Server-2.4.50-RCE Questo strumento è progettato per testare i server Apache per la vulnerabilità CVE-2021-41773 / CVE-2021-42013. È pensato solo per scopi educativi e deve essere utilizzato responsabilmente su sistemi per cui si ha esplicita autorizzazione al test. Installazione: Clon...

POC-CVE-2021-42013-EXPLOIT

-ff0055?style=for-the-badge&logo=python root@kitploit: 🔥 CVE-2021-42013 Exploit Framework di Makaveli 💀 Modalità Hacker Cosmico Multidimensionale attivata... Uno strumento avanzato di scansione, sfruttamento e interazione remota progettato per rilevare e sfruttare la vulnerabilità Apache Path...

Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49 and 2.4.50. An attacker could use a path traversal attack to map URLs to files outside the expected document root. If files outside of the document root are not protected by "require all denied" these requests ca...

cve-2021-42013-httpd

Dockerisierung einer Schwachstelle: cve-2021-42013 Dieses Projekt zielt darauf ab, eine bestimmte Schwachstelle mit Docker zu dockerisieren. Ziel ist es, eine isolierte Umgebung zu schaffen, in der die Schwachstelle sicher ausgenutzt und getestet werden kann. Verwundbare Anwendung Apache HTTP...

Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013

Ricognizione e Sfruttamento: Vulnerabilità del Server HTTP Apache - CVE-2021-41773 e CVE-2021-42013 In questo progetto, ho documentato un processo dettagliato di penetration testing mirato alle vulnerabilità del server HTTP Apache, in particolare CVE-2021-41773 e CVE-2021-42013, che coinvolgono...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Überblick Dieses Exploit-Tool zielt auf Path-Traversal- und Remote-Code-Execution-Schwachstellen in Apache HTTP Server Versionen 2.4.49 und 2.4.50 ab. Das Tool verwendet das curl-Backend, um URL-Codierungsprobleme zu umgehen, die andere Python-basierte Exploit-Versuche beeinträchtigen, und biet...

apache-cve-2021-42013-lab

Apache HTTP Server 2.4.49 Path Traversal & Remote Code Execution CVE-2021-42013 Informazioni sul Progetto In questo progetto ho dimostrato la vulnerabilità CVE-2021-42013 presente in Apache HTTP Server versione 2.4.49 in un ambiente di laboratorio creato con Docker. L'obiettivo è esaminare in un...

Apache-CVEs

Apache-CVEs Exploit creato in python3 per sfruttare vulnerabilità note nel server web Apache CVE-2021-41773, CVE-2021-42013 Cos'è Apache Il progetto Apache HTTP Server è un'iniziativa per sviluppare e mantenere un server HTTP open-source per sistemi operativi moderni, inclusi UNIX e Windows...

apache-cve-2021-42013-rce

apache-cve-2021-42013-rce Laboratorio di penetration testing basato su Docker che simula la vulnerabilità CVE-2021-42013 Path Traversal & RCE su Apache HTTP Server 2.4.49. Questo progetto è stato preparato per simulare e sfruttare exploit la vulnerabilità CVE-2021-42013 presente su Apache HTTP...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Alcune immagini docker per giocare con CVE-2021-41773 e CVE-2021-42013 Esegui docker compose up -d per avviare tutti i contenitori. I server saranno in esecuzione sulle porte 8080, 8081, 8082 e 8083. 8080 contiene un Apache 2.4.49 con CGI disabilitato. 8081 contiene un...

gnutls security update

3.3.29-9.0.3 - Backport fixes for CVE-2026-3833 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 Orabug: 39770407 - CVE-2026-42011 is not applicable to this baseline. 3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846...

RHEL 9 : gnutls (RHSA-2026:41921)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41921 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such a...

CVE-2026-42013 affecting package gnutls for versions less than 3.8.13-1

CVE-2026-42013 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42013

creationtimestamp| type| source ---|---|--- 2026-05-26 23:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xxz5sd2z 2026-06-29 11:40:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfrbkrxz2o...

DEBIAN-CVE-2026-42013

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

CVE-2026-42013

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

Debian dla-4595 : gnutls-bin - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4595 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4595-1 [email protected]...

OESA-2026-2403 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...