Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apac...

Updated apache packages fix security vulnerabilities

The updated packages fix a security vulnerabilities: While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in...

CVE-2021-39226

creationtimestamp| type| source ---|---|--- 2021-10-05 22:30:46+00:00| seen| https://t.me/cibsecurity/29999 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39226.yaml 2023-06-14 21:10:04+00:00| seen|...

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

Apache HTTP Server 2.4.49 Multiple Vulnerabilities - Windows

Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2021:3282-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3282-1 advisory. - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve...

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

CVE-2021-22557

creationtimestamp| type| source ---|---|--- 2021-10-04 14:18:29+00:00| published-proof-of-concept| https://t.me/cibsecurity/29853 2021-10-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50385...

CVE-2021-34355

creationtimestamp| type| source ---|---|--- 2021-10-01 17:10:00+00:00| exploited| https://t.me/truesecator/2171...

CVE-2021-34352

creationtimestamp| type| source ---|---|--- 2021-10-01 17:10:00+00:00| exploited| https://t.me/truesecator/2171...

CVE-2021-34356

creationtimestamp| type| source ---|---|--- 2021-10-01 17:10:00+00:00| exploited| https://t.me/truesecator/2171...

Chromium: CVE-2021-37976 Information leak in core

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This vulnerability is known to be exploited in the wild...

Chromium: CVE-2021-37975 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This vulnerability is known to be exploited in the wild...

Google Emergency Update Fixes Two Chrome Zero Days

Google has pushed out an emergency Chrome update to fix yet another pair of zero days – the second pair this month – that are being exploited in the wild. This hoists this year’s total number of zero days found in the browser up to a dozen. “Google is aware the exploits for CVE-2021-37975 and...

CVE-2021-41293

creationtimestamp| type| source ---|---|--- 2021-09-30 14:37:58+00:00| seen| https://t.me/cibsecurity/29708 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41293.yaml 2025-01-26 00:00:00+00:00| seen| The Shadowserver...

Irfanview Buffer Overflow Vulnerability (CNVD-2021-76099)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. Irfanview is vulnerable to a buffer error that can be exploited by attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-34348

creationtimestamp| type| source ---|---|--- 2021-09-28 16:34:39+00:00| exploited| https://t.me/truesecator/2153 2021-09-28 18:23:32+00:00| seen| https://t.me/informationsecuritychannel/45370...

CVE-2021-34349

creationtimestamp| type| source ---|---|--- 2021-09-28 16:34:39+00:00| exploited| https://t.me/truesecator/2153...

IBM Edge Information Disclosure Vulnerability

Edge is a Node.js logic and template engine that contains batteries. IBM Edge is vulnerable to an information disclosure vulnerability that stems from the program allowing web pages to be stored locally, which could be exploited by an attacker to read those pages...