cve-2026-43512-poc

CVE-2026-43512 — Apache Tomcat DIGEST Authentication Bypass Exploitability analysis result: the root cause is confirmed. End-to-end exploitation is not reproducible against a standard UserDatabaseRealm deployment. See Analysis for details. Table of Contents Overview Affected Versions Root Cause...

PoC_CVE-2019-0217

This repository contains a proof of concept exploit for CVE-2019-0217, along with a Dockerfile to set up a web server vulnerable to the CVE. CVE Description In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in modauthdigest when running in a threaded server could allow a user...

CTT-enhanced-Apache-mod_auth_digest-timing-attack-exploit

CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-Enhanced Apache modauthdigest Timing Attack — CVE-2026-33006 Remote Digest Authentication Bypass → 33-Layer Temporal Timing Attack Original vulnerability: Apache HTTP Server 2.4.66 modauthdigest timing leak CTVSS Original: 4.8 Medium...

CLEANSTART-2026-FM38692 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the solr package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – VoIP SIP Digest Authentication Replay Program Code Python SIP sim sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call',...

curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

A flaw was found in libcurl. When a user performs a transfer over an HTTP proxy using Digest authentication and then reuses the same handle for a second transfer with a different proxy host, libcurl incorrectly sends the Proxy-Authorization header intended for the first proxy to the second proxy...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

CVE-2026-114419

A flaw was found in phodav. The chezdav file-sharing service improperly handles digest authentication by checking only whether a username exists rather than validating the password against stored credentials. A remote attacker who knows a valid username can supply an arbitrary password to bypass...

CLEANSTART-2026-OX74657 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the trino package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-4474)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to...

CVE-2026-84439

A flaw was found in Apache ZooKeeper. When audit logging is enabled, an unauthenticated attacker can inject arbitrary fields into the audit log. This is achieved by sending a digest authentication request with tab characters embedded in the username, or by a client calling setACL with crafted...

CVE-2026-57195

A flaw was found in Asterisk. An unauthenticated remote attacker can cause a Denial of Service DoS by exploiting a null pointer dereference within the Asterisk Manager Interface AMI. When HTTP digest authentication is configured, sending a specially crafted request crashes the Asterisk service,...

curl: curl: Information disclosure via incorrect Digest authentication header reuse

A flaw was found in curl. When libcurl performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This...

CLEANSTART-2025-OC11345 Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTT...

Security vulnerability affects the squid package. Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication...

CLEANSTART-2026-TF73196 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

CLEANSTART-2026-KT08893 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

CLEANSTART-2026-EI15702 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

CLEANSTART-2026-XK98834 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

httpd: httpd: Authentication state corruption via concurrent Digest authentication requests

A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...

curl: curl: Information disclosure via incorrect Digest authentication header reuse

A flaw was found in curl. When libcurl performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This...