[SECURITY] Fedora 45 Update: erlang-cowboy-2.18.0-2.fc45

Small, fast, modular HTTP server written in Erlang...

malvinci

malvinci Este sencillo script introducirá un nuevo tipo de malware que desactivará el firewall, iniciará un servidor HTTP, reenviará su puerto a través de ngrok y enviará la URL del servidor a través de un bot de Telegram. Necesitarás crear un nuevo BOT de Telegram. Sigue los pasos aquí para crea...

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 - Apache = 2.4.48 - SSRF Python 利用工具 精心构造的请求 URI 路径可能导致 modproxy 将请求转发到远程用户选择的源服务器。此问题影响 Apache HTTP Server 2.4.48 及更早版本。 CVSS v3.1： 基础分数：9.0 严重程度：严重 CVSS：3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H 攻击向量：网络 攻击复杂度：高 所需权限：无 用户交互：无 影响范围：已变更 机密性：高 完整性：高 可用性：高 描述 漏洞类别：服务器端请求伪造（SSRF） 该脚本使用...

CVE-2021-41773-POC

CVE-2021-41773 漏洞复现报告 漏洞概述 CVE ID : CVE-2021-41773 漏洞名称 : Apache HTTP Server 路径遍历漏洞 风险等级 : 高危 CVSS 7.5 影响版本 : Apache HTTP Server 2.4.49 漏洞描述 : Apache HTTP Server 2.4.49 版本存在路径规范化函数 apnormalizepath 的实现缺陷，攻击者可通过构造含有 %2e 编码的特殊请求绕过访问控制，读取 Web 服务器上的任意文件。 环境搭建 操作系统 : Ubuntu 20.04 虚拟机 Web服务器 : Apache...

cybersecurity_portfolio

Portfolio. Gleb Usoltsev Second-year student, Institute of Computer Science and Cybersecurity, Peter the Great St. Petersburg Polytechnic University, field of study 10.03.01 «Information Security». As part of the educational introductory practice at Positive Technologies JSC, two practical cases...

flipper-mcp

flipper-mcp Un servidor MCP Model Context Protocol en Rust que se ejecuta directamente en la WiFi Dev Board v1 ESP32-S2 del Flipper Zero, lo que permite a los agentes de IA controlar un Flipper Zero a través de la red. ¿Qué es esto? Este proyecto coloca un servidor MCP en el propio Flipper...

CVE-2021-41773

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...

apache-cve-2021-42013-lab

Apache HTTP Server 2.4.49 路径遍历与远程代码执行 CVE-2021-42013 关于项目 在本项目中，我使用Docker搭建的实验室环境展示了Apache HTTP Server 2.4.49版本中存在的CVE-2021-42013漏洞。 目的是在可控环境中研究漏洞的产生原理、运行机制及其对系统的影响。 本研究仅供教育和实验室目的使用。 使用的技术 Docker Ubuntu 22.04 Apache HTTP Server 2.4.49 Bash curl 项目文件结构 . ├── Dockerfile ├── index.html └── README.md...

httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference

A flaw was found in the modheartmonitor module of the Apache HTTP Server. A remote, unauthenticated attacker can exploit a NULL pointer dereference vulnerability when the module is configured with a unicast listener. By sending specially crafted network traffic to the listening service, an attack...

httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error

A flaw was found in the moddav module of the Apache HTTP Server. This vulnerability allows a Denial of Service DoS by crashing server child processes. An attacker with permission to create Web Distributed Authoring and Versioning WebDAV locks can trigger a memory calculation error during lock...

httpd: httpd: Information disclosure via session cookie leakage during internal redirects

A flaw was found in Apache HTTP Server's modsessioncookie module. When internal redirects alter the SessionCookieRemove configuration, the server may fail to strip the session cookie as expected. This issue can lead to information disclosure by inadvertently forwarding sensitive user session toke...

httpd: httpd: Information disclosure via direct request to the WebDAV state directory

A flaw was found in the moddavfs module of the Apache HTTP Server. A remote attacker can exploit this vulnerability by sending an HTTP GET request directly to the internal WebDAV Web Distributed Authoring and Versioning state directory. This allows unauthorized access to internal state files,...

httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc

A flaw was found in the modxml2enc module of the Apache HTTP Server. An untrusted backend server can cause a Denial of Service DoS by returning a crafted response with a character set whose conversion partially succeeds and then fails. Processing this response triggers an invalid memory access nu...

httpd: httpd: Authentication bypass via credential replay in mod_auth_digest

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest

A flaw was found in the modauthdigest module of the Apache HTTP Server. When Digest authentication is configured with nonce-count checking enabled, missing authentication checks allow an unauthenticated remote attacker to submit forged HTTP Authorization headers. This flaw can lead to a Denial of...

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects

A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...

httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html

A flaw was found in the modproxyhtml module of Apache HTTP Server. An attacker who controls or manipulates HTTP response bodies processed by the proxy can trigger an out-of-bounds memory write. This issue can cause the server process to crash, resulting in a Denial of Service DoS...

httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence

A flaw was found in Apache HTTP Server's moduserdir module. When configured with an absolute path without wildcards for the UserDir directive, the server fails to properly resolve single-dot directory '/./' path equivalence. A remote attacker can exploit this issue by submitting a crafted HTTP...

httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi

A flaw was found in the modproxyuwsgi module of Apache HTTP Server. This issue allows HTTP response smuggling when the server processes a crafted uWSGI response containing a Transfer-Encoding header. A remote attacker can exploit this vulnerability to desynchronize HTTP communications, potentiall...

-CVE-2021-44790

CVE-2021-44790 描述 CVE-2021-44790 CVE-2021-44790 描述了 Apache HTTP Server 的 modlua 中存在的一个系统级安全漏洞，特别是在 2.4.51 及更早版本中。该漏洞在 r:parsebody 函数不正确地处理 HTTP multipart/form-data 请求时触发，通常是由于发送了非标准格式的表单数据。 该问题不仅增加了拒绝服务攻击的可能性，而且还为通过精心构造的请求远程执行恶意代码提供了机会。 实验 CVE-2023-25690 使用 Ubuntu 22.04 作为攻击机 使用 Windows 10 64bit...