CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

CVE-2021-41773_CVE-2021-42013_Exploits

Exploiting CVE-2021-41773 and CVE-2021-42013 Overview This repository focuses on exploiting two vulnerabilities in Apache HTTPD: CVE-2021-41773 and CVE-2021-42013. These CVEs represent path traversal vulnerabilities that can potentially lead to file mapping and remote code execution on Apache HTT...

apatchy

apatchy An in-process fuzzing framework for Apache HTTPD apatchy lets you fuzz Apache's full HTTP request processing pipeline - parsing, hooks, filters, handlers - without any network I/O. It replaces Apache's socket layer with custom I/O filters, feeding raw bytes directly into the same code pat...

CVE-2024-27316_poc

CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start docker-compose up -d Connectivity check httpd v2.4.58 vulnerable curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version curl --http2 -i --head...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn Write-up Date: June 05, 2026 Difficulty: Easy Platform: HackTheBox Key Techniques: Port & Service Enumeration, Directory Fuzzing Gobuster, File Upload Evasion, HTTP Request Manipulation Burp Suite, Remote Code Execution RCE, Advanced TTY Shell Stabilization Python, Local...

POC-CVE-2021-41773

POC-CVE-2021-41773 this is simple script for the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. Usage: Check 1 ip Check from file...

Amazon Linux 2 : httpd (ALAS-2026-3990)

The version of httpd installed on the remote host is prior to 2.4.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3990 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI...

CLEANSTART-2026-PP80959 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLEANSTART-2026-GY12147 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLEANSTART-2026-TY04609 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's

Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...

CVEs

CVEs Proof of concept exploits for various CV...

[SECURITY] Fedora 45 Update: gridsite-3.0.0-0.40.20260121git7a7b764.fc45

GridSite was originally a web application developed for managing and formatti ng the content of the http://www.gridpp.ac.uk/ website. Over the past years it has grown into a set of extensions to the Apache web server and a toolkit for Grid credentials, GACL access control lists and HTTPS protocol...

SUSE CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

Linux Distros Unpatched Vulnerability : CVE-2026-42528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes...

DEBIAN-CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

ALPINE-CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

AZL-106773 CVE-2026-42528 affecting package httpd 2.4.68-1

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...