Lucene search
+L

6125 matches found

Kitploit
Kitploit
added 2026/09/01 6:36 p.m.6 views

it355-lab4-enterprise-lan-security

IT355 Lab 4: 엔터프라이즈 LAN 보안 및 Shellshock 분석 📌 프로젝트 개요 이 저장소는 엔터프라이즈 LAN 환경에 대한 종합적인 보안 평가를 포함합니다. 이 프로젝트의 핵심 초점은 Linux 기반 웹 서버 내의 ShellshockCVE-2014-6271 취약점의 식별, 악용 및 수정이었습니다. 🛠️ 기술 스택 및 도구 - 환경: Fedora Linux서버, Windows호스트/클라이언트 - 네트워킹: Cisco Packet TracerIT/OT 세그멘테이션, NAT, 라우팅 프로토콜 - 서비스:...

10CVSS8.6AI score0.99999EPSS
SaveExploits146
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.6 views

httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server

A flaw was found in the modproxyftp module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol FTP server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service DoS for the...

7.3CVSS7AI score0.00583EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.6 views

httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc

A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...

7.5CVSS7.5AI score0.01024EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.6 views

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...

9.8CVSS7.2AI score0.00504EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.5 views

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

7.3CVSS7.3AI score0.00741EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.5 views

httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...

7.5CVSS7.1AI score0.01161EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.6 views

httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...

7.5CVSS7.2AI score0.00708EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.4 views

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

9.8CVSS6.5AI score0.01376EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.6 views

httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration

A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...

9.8CVSS7.4AI score0.00688EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.5 views

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

6.5CVSS7AI score0.00545EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/01 5:39 p.m.3 views

apache-vulnerability-testing

Apache HTTP Server 脆弱性テストツール このリポジトリは、Apache HTTP Server のさまざまな脆弱性(ファイル名混乱攻撃、SSRF、サービス拒否、および最近のCVEに関連するその他の脆弱性)をテストするための Proof of Concept PoC を提供します。このツールは、サーバーが特定の種類の攻撃に対して脆弱かどうかを評価するために、細工されたHTTPリクエストを送信します。 特徴 複数の脆弱性をテストします。以下を含みます: CVE-2024-38472 : Windows上のApache HTTP ServerにおけるUNC SSRF...

9.8CVSS6.9AI score0.99957EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 5:12 p.m.4 views

CVE-2021-41773-PoC

CVE-2021-41773-PoC PoC para CVE-2021-41773 con docker para demostrarlo Ejecución Solo ejecuta ./poc.sh. Asegúrate de tener docker y docker-compose funcionando root@kitploit: $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/01 5:11 p.m.4 views

CVE-2021-41773-L-

CVE-2021-41773 🐛 Apache HTTP Server 2.4.49 におけるパストラバーサルおよびファイル開示の脆弱性 Apache HTTP Server 2.4.49 のパス正規化に加えられた変更に欠陥が見つかりました。攻撃者はパストラバーサル攻撃を使用して、Alias 系ディレクティブで設定されたディレクトリの外部にあるファイルに URL をマッピングできる可能性があります。 これらのディレクトリ外のファイルが通常のデフォルト設定「require all...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits164
Circl
Circl
added 2026/09/01 5:00 p.m.7 views

CVE-2021-3275

creationtimestamp| type| source ---|---|--- 2026-09-01 17:00:56+00:00| seen| https://t.me/cissp/2735 2026-09-02 01:04:46+00:00| seen| https://t.me/cissp/2735...

6.1CVSS6.3AI score0.01788EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/01 4:54 p.m.6 views

CVE-2019-10092

CVE-2019-10092: Apache HTTP Server의 "Proxy Error" 페이지를 통한 제한적 크로스 사이트 스크립팅 Apache HTTP Server 2.4.0-2.4.39에서 modproxy 오류 페이지에 영향을 주는 제한적 크로스 사이트 스크립팅 문제가 보고되었습니다. 공격자는 오류 페이지의 링크를 잘못된 형태로 만들어 자신이 선택한 페이지를 가리키도록 할 수 있습니다. 이 취약점은 프록시가 활성화되어 있지만 Proxy Error 페이지가 표시되도록 잘못 구성된 서버에서만 악용될 수 있습니다. 공급업체 공...

6.1CVSS6.1AI score0.81466EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/01 11:36 a.m.4 views

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 CVE-2021-41773-Path Traversal ラボの実行方法 1. PC/ラップトップに Docker をインストールして実行する 2. この GitHub リポジトリをクローンする 3. Path Traversal フォルダに移動する 4. 次のコマンドを入力する docker build -t cve-2021-41773-path-traversal . および docker run --rm -dit -p 8888:80 cve-2021-41773-path-traversa...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/01 10:06 a.m.4 views

cve-2021-41773-checker

🛑 CVE-2021-41773 점검기 CVE-2021-41773 점검기는 대상 웹 서버가 Apache HTTP Server 2.4.49에 영향을 미치는 Apache 경로 탐색 취약점에 취약한지 확인하는 Python 기반 CLI 도구입니다. 이 도구는 CVE가 어떻게 식별되고 검증되는지 이해하기 위한 학습 중심의 개념 증명으로 설계되었습니다. 개요 CVE-2021-41773은 Apache HTTP Server 버전 2.4.49의 경로 탐색 취약점으로, 특정 구성에서 공격자가 웹 루트 외부의 파일에 접근할 수 있게 합니다. 이 도...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/01 6:22 a.m.4 views

Apache-Authentication-Flaw-Research-CVE-2024-38476-

🛡️ Apache 인증 결함 연구 CVE-2024-38476 제작: Abanoub Ehab 🛡️ 화웨이 통신 학생 클럽 - AOU Apache HTTP 서버의 의미적 모호성 취약점과 백엔드 응답 처리에 미치는 영향에 대한 포괄적인 기술 연구 논문 📝 초록 citestartCVE-2024-38476 은 Apache HTTP Server버전 ≤ 2.4.59cite: 164에 영향을 미치는 심각한 취약점입니다. 이는 서버가 조작된 백엔드 응답 헤더를 잘못 해석하여 발생하며, 이로 인해: citestart🔀 내부 리디렉션: 승인되지 않은...

9.8CVSS7AI score0.41611EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 3:03 a.m.4 views

CVE-2021-41773h

CVE-2021-41773 Apache HTTP Server 2.4.49의 경로 탐색 및 파일 노출 취약점 CVE-2021-41773 정보 Apache HTTP Server 2.4.49의 경로 정규화 변경에서 결함이 발견되었습니다. 공격자는 경로 탐색 공격을 사용하여 URL을 예상 문서 루트document root 외부의 파일에 매핑할 수 있습니다. 문서 루트 외부의 파일이 "require all denied"로 보호되지 않으면 이러한 요청이 성공할 수 있습니다. 또한 이 결함은 CGI 스크립트와 같은 해석된 파일의 소스를 유...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/01 1:43 a.m.4 views

Preproduce-CVE-2021-41773

CVE 2021-41773 재현 Apache HTTP Server 2.4.49의 경로 탐색 및 파일 노출 취약점 CVE-2021-41773 POC root@kitploit: $ docker compose up 동작 확인 root@kitploit: $ curl -I http://localhost HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 13:25:18 GMT Server: Apache/2.4.49 Unix Last-Modified: Mon, 11 Jun 2007 18:53:14 GMT ETag:...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits164
Rows per page
Query Builder