apache_audit_cve-2026-23918

cve-2026-23918 CVE-2026-23918 Apache HTTPD HTTP/2 डबल-फ्री RCE और 4 मई, 2026 को Apache Software Foundation सुरक्षा परामर्श में खुलासा किए गए चार संबंधित CVE के लिए रक्षात्मक ऑडिट उपकरण। CVE| गंभीरता| घटक| प्रभाव| प्रभावित संस्करण ---|---|---|---|--- CVE-2026-23918| उच्च CVSS 8.8| HTTP/2| डबल फ्री...

Popcorn-TJNULL-OSCP-

HackTheBox: Write-up do Popcorn Data: 05 de junho de 2026 Dificuldade: Fácil Plataforma: HackTheBox Técnicas Principais: Enumeração de Portas e Serviços, Fuzzing de Diretórios Gobuster, Evasão de Upload de Arquivos, Manipulação de Requisições HTTP Burp Suite, Execução Remota de Código RCE,...

CVE-2021-41773

CVE-2021-41773 Ambiente de Testes Esta é uma pequena receita Docker para configurar um contêiner baseado em Debian bookworm com uma instância do Apache HTTPd 2.4.49 que é vulnerável a CVE-2021-41773. O CGI foi explicitamente habilitado para que possa ser usado para testar/verificar o comportament...

CVE-2026-23918

CVE-2026-23918 Dupla liberação na limpeza de stream modhttp2 do Apache httpd levando a RCE pré-autenticação. Afetado: httpd 2.4.66 com modhttp2 e MPM multithread event/worker. Corrigido em: 2.4.67. Encontrado e reportado por Bartlomiej Dmitruk striga.ai e Stanislaw Strzalkowski isec.pl. Writeup:...

http2-bomb-detector

http2-bomb-detector HTTP/2 बम CVE-2026-49975 गैर-विनाशकारी भेद्यता जांच उपकरण — Nginx / Apache httpd के लिए भेद्यता पृष्ठभूमि CVE-2026-49975 एक व्यापक प्रभाव वाला HTTP/2 प्रोटोकॉल स्तरीय दूरस्थ सेवा अस्वीकार भेद्यता है, जिसे सुरक्षा शोधकर्ता Quang Luong द्वारा खोजा गया। यह भेद्यता HPACK हेडर...

Moderate: Red Hat Security Advisory: mod_md security update

An update for modmd is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Algumas imagens docker para brincar com CVE-2021-41773 e CVE-2021-42013 execute docker compose up -d para subir todos os contêineres. Os servidores rodarão nas portas 8080, 8081, 8082 e 8083. 8080 contém um Apache 2.4.49 com CGI desabilitado. 8081 contém um Apache 2.4.49...

RHSA-2026:55992 Red Hat Security Advisory: mod_http2 security update

Bulletin has no description...

RHSA-2026:55930 Red Hat Security Advisory: mod_http2 security update

Bulletin has no description...

Apache HTTPD: Multiple Vulnerabilities

Background The Apache HTTP server is one of the most popular web servers on the Internet. Description Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

GLSA-202608-05 : Apache HTTPD: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-05 Apache HTTPD: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

RHEL 9 : mod_http2 (RHSA-2026:50572)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50572 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: modhttp2:...

httpd: Fix of CVE-2026-44186

CVE-2026-44186: modproxyftp: infinite loop in proxyftphandler when scanning an FTP 120 greeting for a Retry-After delta-seconds value; the scan loop never advanced secsstr, so it spun forever on any greeting that did not begin with a digit, letting a backend FTP server hang worker processes...

Important: Red Hat Security Advisory: mod_http2 security update

An update for modhttp2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

macOS 14.x < 14.8.8 Multiple Vulnerabilities (128072)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.8. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to...

Oracle Linux 8 : httpd:2.4 (ELSA-2026-42828)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42828 advisory. - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 -...