PoC_CVE-2019-0217

本仓库包含针对 CVE-2019-0217 的概念验证利用代码，以及用于搭建存在该漏洞的 Web 服务器的 Dockerfile。 CVE 描述 在 Apache HTTP Server 2.4 版本 2.4.38 及更早版本中，运行在线程化服务器上的 modauthdigest 存在一个竞态条件，可能允许拥有有效凭据的用户使用另一个用户名进行身份验证，从而绕过已配置的访问控制限制。 背景 HTTP 摘要身份认证 当客户端尝试访问受 HTTP Digest Auth 保护的资源时，服务器会返回 401 状态码，并附带一个 WWW-Authenticate 头部，其格式大致如下：...

Astra Linux – Vulnerability in Tomcat9

DEPRECATED: There is a vulnerability related to authentication bypass in digest authentication in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.21, 10.1.0-M1 through 10.1.54, 9.0.0.M1 through 9.0.117, 8.5.0 through 8.5.100, and versions prior to 7.0.0...

gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

BIT-TOMCAT-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

BIT-TOMCAT-2026-43512 Apache Tomcat: Digest authenticator will authenticate any unknown user

DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0. Older unsupported versions any...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – Replay de autenticación digest SIP en VoIP Código del programa simulador SIP en Python root@kitploit: sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces...

RHEL 10 : gstreamer1-plugins-base (RHSA-2026:66460)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66460 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain...

jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain...

CTT-enhanced-Apache-mod_auth_digest-timing-attack-exploit

CTT增强版Apache modauthdigest时序攻击 — CVE-2026-33006 🔥 概述 这是对CVE-2026-33006的收敛时间理论（CTT）增强，该漏洞是Apache HTTP Server modauthdigest组件（版本≤2.4.66）中基于时序的漏洞。 原始漏洞允许远程攻击者通过统计时序分析绕过Digest认证。 CTT增强版将其转变为33层时间级联时序攻击。...

cve-2026-43512-poc

CVE-2026-43512 — Apache Tomcat DIGEST 认证绕过 可利用性分析结果： 根本原因已确认。但针对标准 UserDatabaseRealm 部署，端到端利用不可复现 。详情请参见分析。 目录 概述 受影响版本 根本原因 分析 仓库结构 要求 使用方法 预期输出 参考 免责声明 概述 CVE-2026-43512 是 Apache Tomcat 的 HTTP DIGEST 认证机制中的一个漏洞。方法 RealmBase.getDigest 在构造 A1 哈希输入之前，未验证 getPasswordusername 的返回值。当用户名在已配置的 Realm...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by Eclipse Jetty Digest Authentication Bypass Vulnerability

Summary SPSS Collaboration and Deployment Services is affected by Eclipse Jetty Digest Authentication Bypass Vulnerability. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-10050 DESCRIPTION: In Eclipse Jetty, the Digest authentication server-side component...

SUSE CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

UBUNTU-CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

AZL-99891 CVE-2026-85150 affecting package gstreamer1-plugins-base 1.20.0-3

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

EUVD-2026-70380

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2026-85150 Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...