EulerOS Virtualization 2.13.0 : httpd (EulerOS-SA-2026-3215)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

PT-2026-81889

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.39 through 9.0.120 Apache Tomcat versions 8.5.59 through 8.5.100 Description An uncontrolled resource consumption issu...

Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.59. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.59security-10 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss...

PT-2026-81876

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...

EulerOS Virtualization 2.13.1 : httpd (EulerOS-SA-2026-3175)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

PT-2026-81878

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.20 through 11.0.24 Apache Tomcat versions 10.1.53 through 10.1.57 Apache Tomcat versions 9.0.115 through 9.0.120 Description Improper input validation occurs due to an incomplete fix for a previous issue...

PT-2026-81885

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Description An off-by-one error in the rewrite valve...

CVE-2026-23918-Passive-Audit

Script de auditoria CVE-2026-23918 alternativamente, você poderia apenas usar curl nos cabeçalhos e dar uma olhada, mas aqui está: Auditor de metadados HTTP não invasivo para Apache HTTP Server Triagem de exposição CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19. A...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Verwendungsweise root@kitploit: ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Dieses Skript ist AUSSCHLIESSLICH für Bildungszwecke und autorisierte Penetrationstests bestimmt. Die unbefugte Nutzung dieses Tools auf Systemen ohne...

CVE-2026-71300

CVE-2026-71300 — camel-atmosphere-websocket Dispatch-Header-Injection Lauffähiger Proof-of-Concept-Reproducer für die Apache-Camel-Schwachstelle, bei der der camel-atmosphere-websocket-Producer seine WebSocket-Empfänger aus websocket.-Exchange-Headern auswählt, deren Namen außerhalb des...

CVE-2026-63039

CVE-2026-63039 — Apache InLong AuditAlertRule SQL-Injektion in ORDER BY Ausführbarer Proof-of-Concept-Reproduktionscode für die SQL-Injektion in der Audit-Alert-Rule-Abfrage von Apache InLong. Der InLong-Manager-Mapper AuditAlertRuleEntityMapper.selectByCondition filtert mit sicheren...

CVE-2026-63621

CVE-2026-63621 — camel-knative संरचित CloudEvent हेडर इंजेक्शन समान Apache Camel कमज़ोरी के लिए चलाने योग्य proof-of-concept रीप्रोड्यूसर, प्रति रनटाइम एक:...

CVE-2026-60093

CVE-2026-60093 — camel-azure-storage-datalake downloadToFile attraversamento del percorso Riproduzioni proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, una per runtime:...

CVE-2026-28672

CVE-2026-28672 — Iniezione di comandi OS in UnixUserGroupBuilder di Apache Ranger Reproducer proof-of-concept eseguibile per l'iniezione di comandi OS nel modulo user-sync unixusersync di Apache Ranger. Durante l'enumerazione dei gruppi di ogni utente sincronizzato, UnixUserGroupBuilder esegue il...

CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName Path Traversal Ausführbare Proof-of-Concept-Reproducer für dieselbe Apache-Camel-Schwachstelle, einer pro Laufzeitumgebung:...

CVE-2026-59230

CVE-2026-59230 — camel-mail MimeMultipart-Header-Injektion headersInline Ausführbare Proof-of-Concept-Reproduktionen für dieselbe Apache-Camel-Schwachstelle, eine pro Laufzeitumgebung: Laufzeitumgebung| Verzeichnis| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 +...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile Pfad-Traversal Ausführbare Proof-of-Concept-Reproduktionen für dieselbe Apache-Camel-Schwachstelle, eine pro Laufzeitumgebung: Laufzeitumgebung| Verzeichnis| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 +...

CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud nicht validiert Ausführbarer Proof-of-Concept-Reproduktor für die Apache-Camel-Schwachstelle, bei der der in camel-main eingebettete HTTP-Server seinen JWT-Authentifikator allein aus einem Keystore erstellt, wenn weder jwtIssuer noch jwtAudien...

CVE-2017-5638-POC

CVE-2017-5638-POC Configurazione del server vulnerabile e proof of concept di CVE-2017-5638 vulnerabilità di esecuzione remota di codice in un componente Apache Server Il server vulnerabile viene eseguito in un container docker, l'immagine può essere creata usando il Dockerfile, eseguendo questo...

XSYS-Log4J2Shell-Ex

XSYS-Log4J2Shell-Ex CVE-2021-44228 log4j2shell PoC come parte di una ricerca di sicurezza per una patch di vulnerabilità Panoramica root@kitploit: In questo repository tratterò diversi argomenti e implementazioni che forniscono una PROVA DI CONCETTO riguardante la vulnerabilità Log4J 2.17.0...