Lucene search
+L

14026 matches found

Kitploit
Kitploit
•added 2026/09/24 11:31 p.m.•11 views

CVE-2021-41773

CVE-2021-41773 Apache HTTP服务器漏洞(仅影响2.4.49版本) 需求设置 httpd.conf ... LoadModule cgimodule modules/modcgi.so 取消注释这一行 ... AllowOverride none Require all denied 注释掉这一行或设置为Require all granted ... 参考 https://attackerkb.com/topics/1RltOPCYqE/cve-2021-41773/rapid7-analysis...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits169
NVD
NVD
•added 2026/09/24 9:18 p.m.•15 views

CVE-2026-82708

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

7.1CVSS0.00214EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/24 8:21 p.m.•30 views

CVE-2026-82708 Botslab G980H Dashcams Improper Limitation of a Pathname to a Restricted Directory

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

7.1CVSS0.00214EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 8:21 p.m.•13 views

EUVD-2026-86463

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

7.1CVSS5.8AI score0.00214EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:21 p.m.•38 views

CVE-2026-82708

The Botslab G980H dash camera firmware contains a path traversal vulnerability within its HTTP server . An attacker with access to the device's WiFi network can submit a crafted request to bypass directory restrictions and access files on the device's removable storage . This could lead to the ex...

7.1CVSS5.8AI score0.00214EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•6 views

PT-2026-98195

Name of the Vulnerable Software and Affected Versions @rsdoctor/rspack-plugin versions prior to 1.5.16 Description The default report HTTP server started by @rsdoctor/rspack-plugin binds to all network interfaces 0.0.0.0 and serves a POST /api/data/key endpoint without authentication and with...

7.5CVSS6AI score0.0036EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•6 views

PT-2026-98278

Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The HTTP server in the firmware contains a path traversal flaw. This allows an attacker connected to the device WiFi network to send a specially crafted request to access files on the...

7.1CVSS5.8AI score0.00214EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•6 views

CVE-2026-82708: Improper Limitation of a Pathname to a Restricted Directory

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

7.1CVSS5.8AI score0.00214EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/23 5:04 p.m.•17 views

CVE-2026-47874

A flaw was found in the Reactor Netty HTTP server. A remote attacker can exploit this vulnerability by sending HTTP/1.1 pipelined requests over a single connection. This action causes the server to consume an excessive amount of memory, leading to a Denial of Service DoS...

7.5CVSS5.9AI score0.00402EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/23 2:44 a.m.•7 views

MAL-2026-16444 Malicious code in n8n-nodes-healthmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6e9b877fe50a6a5cdf3cd0af73e755973a6eecb2940424618a5edfdc9443ed n8n-nodes-healthmon ships as a purported n8n health-monitoring node but its index.js binds an HTTP server on 0.0.0.0:41111 that reads a JSON body and...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/23 2:44 a.m.•26 views

Malicious code in n8n-nodes-healthmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6e9b877fe50a6a5cdf3cd0af73e755973a6eecb2940424618a5edfdc9443ed n8n-nodes-healthmon ships as a purported n8n health-monitoring node but its index.js binds an HTTP server on 0.0.0.0:41111 that reads a JSON body and...

6AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/22 8:17 p.m.•19 views

CVE-2026-89282

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

9.1CVSS0.00268EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/22 8:17 p.m.•36 views

CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

8.4CVSS0.00125EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/22 7:17 p.m.•13 views

CVE-2026-89281 CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

6.2AI score0.00125EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 7:17 p.m.•44 views

CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build is affected by a hardcoded configuration path vulnerability specifically within the openssl.cnf path. This security flaw can lead to local code execution . No specific remediation, exploit links, or versions are provided in the do...

8.4CVSS6.2AI score0.00125EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/22 7:17 p.m.•62 views

CVE-2026-89281 CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

0.00125EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:17 p.m.•17 views

EUVD-2026-84681

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

6.2AI score0.00125EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/22 7:17 p.m.•13 views

CVE-2026-89282 CVE-2026-89282

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

5.9AI score0.00268EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 7:17 p.m.•74 views

CVE-2026-89282

The Apache Lounge Windows distribution of the Apache HTTP Server contains an insecure installation directory permissions vulnerability. The issue stems from the default installation directory on **C:**, which incorrectly inherits write access for Authenticated Users . No specific remediation, exp...

9.1CVSS5.9AI score0.00268EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:17 p.m.•21 views

EUVD-2026-84680

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

5.9AI score0.00268EPSS
SaveExploits0References3
Rows per page
Query Builder