Lucene search
+L

5991 matches found

OpenVAS
OpenVAS
added 2021/10/06 12:0 a.m.61 views

Apache HTTP Server 2.4.49 Directory Traversal / RCE Vulnerability - Active Check

Apache HTTP Server is prone to a directory traversal and a possible remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.9AI score0.99992EPSS
SaveExploits157References3
Check Point Advisories
Check Point Advisories
added 2021/10/06 12:0 a.m.36 views

Apache HTTP Server Directory Traversal (CVE-2021-41773; CVE-2021-42013)

A directory traversal vulnerability exists in Apache HTTP Server. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

7.5CVSS8.7AI score0.99992EPSS
SaveExploits182
Exploit DB
Exploit DB
added 2021/10/06 12:0 a.m.3881 views

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)

Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Date: 10/05/2021 Exploit Author: Lucas Souza https://lsass.io Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE : CVE-2021-41773 Credits: Ash Daulton and the cPanel Security Team...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits157
GithubExploit
GithubExploit
added 2021/10/05 11:53 p.m.423 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Path traversal and file disclosure vulnerabilit...

7.5CVSS9.3AI score0.99992EPSS
SaveExploits157
GithubExploit
GithubExploit
added 2021/10/05 8:30 p.m.232 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Exploitation of CVE-202...

7.5CVSS9.3AI score0.99992EPSS
SaveExploits157
GithubExploit
GithubExploit
added 2021/10/05 5:30 p.m.416 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 PoC Proof of concept to check if hosts are vul...

7.5CVSS8.3AI score0.99992EPSS
SaveExploits157
GithubExploit
GithubExploit
added 2021/10/05 5:29 p.m.207 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Proof of Concept Quick and dirty proof of conce...

7.5CVSS9.4AI score0.99992EPSS
SaveExploits157
GithubExploit
GithubExploit
added 2021/10/05 4:18 p.m.41 views

Exploit for Path Traversal in Apache Http_Server

It is an exploit module for Apache Log4j. The target product/ser...

7.5CVSS7.5AI score0.99992EPSS
SaveExploits157
GithubExploit
GithubExploit
added 2021/10/05 4:13 p.m.408 views

Exploit for Path Traversal in Apache Http_Server

cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in...

7.5CVSS9.3AI score0.99992EPSS
SaveExploits157
OSV
OSV
added 2021/10/05 9:15 a.m.9 views

DEBIAN-CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS8.7AI score0.99992EPSS
SaveExploits157References1
NVD
NVD
added 2021/10/05 9:15 a.m.52 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS0.99992EPSS
SaveExploits157References30
OSV
OSV
added 2021/10/05 9:15 a.m.69 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS0.8AI score
SaveExploits0References30
Prion
Prion
added 2021/10/05 9:15 a.m.80 views

Path traversal

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

4.3CVSS7.9AI score0.99992EPSS
SaveExploits182References29Affected Software3
Vulnrichment
Vulnrichment
added 2021/10/05 8:40 a.m.31 views

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.9AI score0.99992EPSS
SaveExploits157References29
Cvelist
Cvelist
added 2021/10/05 8:40 a.m.167 views

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

8.1AI score0.99992EPSS
SaveExploits157References29
CVE
CVE
added 2021/10/05 8:40 a.m.3438 views

CVE-2021-41773

CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49 affecting how path normalization maps URLs to files under Alias-like directives. The issue could allow access to files outside configured directories; if CGI scripts are enabled for those paths, remote code execution is...

9.8CVSS9.2AI score0.99992EPSS
SaveIn wildExploits157References30Affected Software1
Cvelist
Cvelist
added 2021/10/05 8:40 a.m.38 views

CVE-2021-41524 null pointer dereference in h2 fuzzing

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

7.6AI score0.2517EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2021/10/05 12:0 a.m.45 views

Apache HTTP Server 2.4.49 Multiple Vulnerabilities - Windows

Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits157References3
Tenable Nessus
Tenable Nessus
added 2021/10/05 12:0 a.m.307 views

Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is 2.4.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.50 advisory. - While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits157References3
Tenable Nessus
Tenable Nessus
added 2021/10/05 12:0 a.m.481 views

Apache HTTP Server 2.4.49 Path Traversal (CVE-2021-41773)

Binary data apache2449pathtraversal.nbin...

7.5CVSS8.8AI score0.99992EPSS
SaveExploits157References2
Rows per page
Query Builder