65208 matches found
CVE-2020-1938
CVE-2020-1938 Suricata Erkennungsregeln root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo";...
cve-2026-43512-poc
CVE-2026-43512 — Bypass de Autenticação DIGEST do Apache Tomcat Resultado da análise de explorabilidade: a causa raiz está confirmada. A exploração de ponta a ponta não é reproduzível contra uma implantação padrão do UserDatabaseRealm. Veja Análise para detalhes. Índice Visão Geral Versões Afetad...
cve-2021-41773-exploration
Panoramica CVE-2021-41773 è una vulnerabilità di path traversal scoperta in Apache HTTP Server 2.4.49 nell'ottobre 2021. La causa principale è stata un errore nella normalizzazione delle sequenze di punti finali nell'URL prima di verificare che il percorso richiesto rimanesse all'interno della ro...
Mobile-Drop-Device-SOC-Detection
🛡️ परियोजना फैंटम: मोबाइल "ड्रॉप डिवाइस" SOC डिटेक्शन सिमुलेशन यह परियोजना एक एंड-टू-एंड SOC प्रयोगशाला कार्यशाला का प्रदर्शन करती है जो यह दर्शाती है कि कैसे एक अनधिकृत, रूट-रहित एंड्रॉइड डिवाइस Casper Via S, जिसे आंतरिक नेटवर्क के भीतर "ड्रॉप डिवाइस" के रूप में उपयोग किया जाता है, Wazuh SIEM...
decoder-plus-plus
Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...
CVE-2025-24813-Exploit
CVE-2025-24813-Exploit Exploit per l'esecuzione di codice remoto RCE in Apache Tomcat - CVE-2025-24813 🚀 Exploit RCE per Apache Tomcat - CVE-2025-24813 🔥 Strumento di Exploit e Rilevamento per Apache Tomcat RCE CVE-2025-24813 Questa repository contiene un exploit PoC Proof of Concept per la...
apache-vulnerability-testing
Strumento di Test delle Vulnerabilità del Server HTTP Apache Questo repository fornisce una Proof of Concept PoC per testare varie vulnerabilità del server HTTP Apache, inclusi attacchi di confusione dei nomi file, SSRF, denial of service e altre relative a CVE recenti. Lo strumento invia richies...
pulsar-docker-images-patch-CVE-2021-44228
Applica la patch alle immagini Pulsar con l'aggiornamento Apache Log4J 2.17.1 Copre CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 Vedi Vulnerabilità di sicurezza e aggiornamenti di Log4J per maggiori informazioni. vedi il Dockerfile per la soluzione Creazione e push delle immagini...
Triage-CVE-2021-44228-Log4Shell-Log4j-
Analisi: CVE-2021-44228 Log4Shell / Log4j Per questo laboratorio, l'obiettivo era analizzare un'altra vulnerabilità reale e ben nota, Log4Shell, una delle vulnerabilità più sfruttate degli ultimi anni a causa della diffusione della libreria interessata nel software aziendale. Passo 1: Aprire la C...
CVE-2020-9496
CVE-2020-9496 - RCE Poiché le 2 richieste relative a xmlrpc in webtools xmlrpc e ping non utilizzano l'autenticazione, sono vulnerabili a una deserializzazione non sicura. Questo problema è stato segnalato al team di sicurezza da Alvaro Munoz [email protected] del team GitHub Security Lab...
httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.
A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...
httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...
Moderate: Red Hat Security Advisory: mod_http2 security, bug fix, and enhancement update
An update for modhttp2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2026-66276
A flaw was found in Apache Qpid Proton-J. An authenticated attacker can exploit this vulnerability by crafting a specially designed disposition frame with large or illegal ranges. This can cause excessive CPU usage due to naive range handling, leading to a denial of service DoS for the affected...
CVE-2026-67591
A flaw was found in Apache Qpid ProtonJ2. An authenticated attacker can exploit this vulnerability by exceeding the session flow control incoming window. This can lead to a denial of service DoS, making the system unavailable to legitimate users. Mitigation Ensure authenticated access to AMQP...
CVE-2026-66275
A flaw was found in Apache Qpid Proton-J. An authenticated attacker could exploit this by exceeding the session flow control incoming window. This action could lead to a denial of service DoS, making the system unavailable to legitimate users. Mitigation Ensure authenticated access to AMQP...
apatchy
apatchy Un framework di fuzzing in-process per Apache HTTPD apatchy ti permette di fare fuzzing sull'intera pipeline di elaborazione delle richieste HTTP di Apache - parsing, hook, filtri, handler - senza alcun I/O di rete. Sostituisce il layer socket di Apache con filtri I/O personalizzati,...
CVE-2021-41773
HTTP Apache Path Traversal NSE-Skript CVE-2021-41773 Beschreibung Dieses NSE-Skript prüft, ob ein Apache-HTTP-Server anfällig für die Path Traversal -Schwachstelle CVE-2021-41773 ist. Ein anfälliger Server ermöglicht es Angreifern, ohne Anmeldung auf Dateien zuzugreifen, auf die sie keinen Zugrif...
httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration
A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...