Rocky Linux 9 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2026_22551)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202622551 advisory. httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase CVE-2025-53020 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: mod_proxy_cluster / mod_proxy_cluster-debuginfo / etc (crlba-2025_2973)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20252973 advisory. The modproxycluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Bug Fixes: Rebuild modproxycluster against httpd 2.4.62...

Rocky Linux 10.2 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2026_22528)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202622528 advisory. httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase CVE-2025-53020 Tenable has extracted the preceding description block directly from the CIQ security...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.4:CLSA-2026:1767613214)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1767613214 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query strin...

Rocky Linux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1769099972)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769099972 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc (ALMALINUX9.2:CLSA-2026:1782212784)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782212784 advisory. - Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP...

CVE-2021-41773-Apache-Path-Traversal-Lab

Apache CVE-2021-41773 セキュリティラボ ITSOLERA PVT LTD でのインターンシップ中に開発された、制御されたサイバーセキュリティラボ。Apache HTTP Server 2.4.49 に影響を与えるパストラバーサルおよび潜在的なリモートコード実行の脆弱性である CVE-2021-41773 を研究・実証するためのものです。 📌 プロジェクト概要 このプロジェクトは、Apache HTTP Server 2.4.49 を実行する分離された Docker ベースの環境を作成し、脆弱性を理解するための Python プルーフオブコンセプトを提供します。...

cve-2021-41773-exploration

概要 CVE-2021-41773 は、2021年10月に Apache HTTP Server 2.4.49 で発見されたパストラバーサルの脆弱性です。根本原因は、要求されたパスが Web ルート内に収まっているかを確認する前に、URL 内のドットシーケンスを適切に正規化できなかったことにあります。この脆弱性により、攻撃者は Web ルートを抜け出してサーバのファイルシステム上の任意のファイルにアクセスすることが可能となり、一部のケースではリモートコード実行にまでエスカレーションする可能性がありました。 この検証で実証する2つの攻撃ベクトル パストラバーサル:...

it355-lab4-enterprise-lan-security

IT355 ラボ 4: エンタープライズ LAN セキュリティ & Shellshock 分析 📌 プロジェクト概要 このリポジトリには、エンタープライズ LAN 環境の包括的なセキュリティ評価が含まれています。このプロジェクトの主な焦点は、Linux ベースのウェブサーバーにおける Shellshock CVE-2014-6271 脆弱性の特定、悪用、および修復でした。 🛠️ 技術スタックとツール 環境: Fedora Linux サーバー, Windows ホスト/クライアント ネットワーク: Cisco Packet Tracer IT/OT セグメンテーション, NAT,...

CVE-2021-41773

Apache HTTP Server 2.4.49 - パストラバーサル & RCE CVE-2021-41773 CVE-2021-41773 を対象とした、洗練された Python ベースの概念実証 PoC エクスプロイトです。このツールは、Apache 2.4.49 サーバーにおけるパストラバーサルおよびリモートコード実行 RCE の脆弱性をテストするプロセスを自動化します。 ⚠️ 法的免責事項 このツールは教育目的のみ...

Apache-Authentication-Flaw-Research-CVE-2024-38476-

🛡️ Apache 인증 결함 연구 CVE-2024-38476 제작: Abanoub Ehab 🛡️ 화웨이 통신 학생 클럽 - AOU Apache HTTP 서버의 의미적 모호성 취약점과 백엔드 응답 처리에 미치는 영향에 대한 포괄적인 기술 연구 논문 📝 초록 citestartCVE-2024-38476 은 Apache HTTP Server버전 ≤ 2.4.59cite: 164에 영향을 미치는 심각한 취약점입니다. 이는 서버가 조작된 백엔드 응답 헤더를 잘못 해석하여 발생하며, 이로 인해: citestart🔀 내부 리디렉션: 승인되지 않은...

apache-vulnerability-testing

Apache HTTP Server 취약점 테스트 도구 이 저장소는 Apache HTTP Server의 다양한 취약점파일명 혼동 공격, SSRF, 서비스 거부Denial of Service 및 최근 CVE와 관련된 기타 취약점을 테스트하기 위한 개념 증명PoC 을 제공합니다. 이 도구는 서버가 특정 유형의 공격에 취약한지 평가하기 위해 조작된 HTTP 요청을 전송합니다. 기능 다음을 포함한 여러 취약점 테스트: CVE-2024-38472 : Windows UNC SSRF를 통한 Apache HTTP Server...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Apache HTTP Server 2.4.49에서의 경로 탐색 및 파일 노출 취약점 Apache HTTP Server 2.4.49의 경로 정규화 변경에서 결함이 발견되었습니다. 공격자는 경로 탐색 공격을 사용하여 Alias와 같은 지시문으로 구성된 디렉터리 외부의 파일에 URL을 매핑할 수 있습니다. 이러한 디렉터리 외부의 파일이 일반적인 기본 구성인 "require all denied"로 보호되지 않으면 이러한 요청이 성공할 수 있습니다. 또한 이러한 별칭 경로에 CGI 스크립트가 활성화된 경우...

CVE-2021-41773

CVE-2021-41773 — Apache パストラバーサル & RCE エクスプロイト TryHackMe の 「Modern Web Stacks」 ルームの Writeup。modcgi が有効な場合にリモートコード実行へとつながる、Apache HTTP Server 2.4.49 のパストラバーサル脆弱性 CVE-2021-41773 の悪用に焦点を当てています。 概要 項目| 詳細 ---|--- 脆弱性| CVE-2021-41773 — Apache 2.4.49 パストラバーサル / RCE 対象サービス| ポート 8080 上の Apache HTTP Serve...

AlmaLinux 9.6 [TuxCare] Security Update: mod_md (ALMALINUX9.6:CLSA-2026:1767629031)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767629031 advisory. - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to...

AlmaLinux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc (ALMALINUX9.6:CLSA-2025:1767027096)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767027096 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query strin...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1768213076)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1768213076 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables se...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1724706840)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1724706840 advisory. - Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to...

CentOS Linux 8 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1769014292)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1769014292 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1769013944)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1769013944 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables se...