CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex regex: -...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 的 PoC 和实验环境 安装实验环境 $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

apache_2.4.50

Apache HTTP Server 2.4.50 本地文件包含与远程代码执行 一个针对 CVE-2021-42013 - Apache HTTP Server 2.4.50 本地文件包含与远程代码执行的 python3 脚本。远程代码执行需要启用 cgi-bin 快速开始 运行程序 本地文件包含（LFI） python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd 远程代码执行（RCE） python3 apache2.4.50.py -t http://apache.hack/ -rce whoami...

cve-2021-41773

Apache 2.4.49 - 路径遍历或远程代码执行 cve-2021-41773.py 是一个 Python 脚本，用于检测 Apache 2.4.49 中的路径遍历或远程代码执行漏洞。提供了易受攻击的 Docker 实例，让您亲身体验 CVE-2021-41773 如果 CGI-BIN 已启用，则可以执行远程代码执行（而非路径遍历），因此 在 httpd.conf 的 Alias 部分中添加了 "icons" 目录，用于检测路径遍历漏洞。 httpd.conf 中的易受攻击配置 1. 启用 CGI-BIN 2. 在 Alias 部分添加 "icons" 目录 3. Require...

perf-exploiter

perf-exploiter CVE-2014-2630 在我们最近的一次渗透测试中，我们利用了一个影响名为“xglance-bin”的 suid 二进制文件的漏洞。作为 HP Performance Monitoring 解决方案 的一部分，它使我们能够在一些 Linux RHEL 7.x/8.x 系统上将本地非特权会话提升至 root 权限。老实说，这并不是我们第一次利用这个特定漏洞，自 2014 年以来，我们已在许多安装了 RHEL 的 HP 服务器上频繁滥用该漏洞。 该漏洞确实有一个已注册的 CVE 编号（CVE-2014-2630），最初由 Portcullis 的 Tim...

GHSA-96H3-5X6V-M776 Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a runnable vendor/bin command that points at that outside file. This is a path traversal and link...

EUVD-2026-80863

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path...

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a runnable vendor/bin command that points at that outside file. This is a path traversal and link...

Rocky Linux 8.6 [CIQ] Security Update: sgabios / sgabios-bin Multiple Vulnerabilities (ciqsa-2026_0258)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260258 advisory. This advisory aggregates security fixes for the sgabios SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409. Tenable ha...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1783955624)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783955624 advisory. - x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

VulnCheck KEV: CVE-2025-3759

Endpoint /cgi-bin-igd/netcoreset.cgi which is used for changing device configuration is accessible without authentication. This poses a significant security threat allowing for e.g: administrator account hijacking or AP password changing. The vendor was contacted early about this disclosure but d...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2025:1761325428)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1761325428 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8.6 [CIQ] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-src / etc Multiple Vulnerabilities (ciqsa-2026_1004)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261004 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2024-34155, CVE-2024-34156, CVE-2024-34158,...

Rocky Linux 9.2 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ciqsa-2026_0424)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260424 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2024-34155, CVE-2024-34156, CVE-2024-34158,...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1789647110)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789647110 advisory. - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. CVE-2026-42504 Note that Nessus...

PT-2026-105164

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parse array primitive/2 for constructor 0x45 list0 returns an element with byte-width B = 0. The enclosing array32 parser at line 148 reads a 4-byte Count from the wire and loops Count times...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2025:1765379145)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765379145 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7 [TuxCare] Security Update: dmidecode (CENTOS7:CLSA-2026:1777996588)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777996588 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via...

Rocky Linux 9 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc Multiple Vulnerabilities (crlsa-2025_7309)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257309 advisory. openjpeg: heap buffer overflow in bin/common/color.c CVE-2024-56826 openjpeg: heap buffer overflow in lib/openjp2/j2k.c CVE-2024-56827 Tenable has extracte...

Rocky Linux 8.8 [CIQ] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-src / etc Multiple Vulnerabilities (ciqsa-2026_0324)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260324 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 8.8. It addresses 5 CVEs: CVE-2024-34155, CVE-2024-34156, CVE-2024-34158,...