CVE-2026-56153

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

DEBIAN-CVE-2026-56153

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

ALPINE-CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56449

Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-48005

Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced re-authentication via forged Authorization headers when Digest authentication is enabled with...

DEBIAN-CVE-2026-48005

Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced re-authentication via forged Authorization headers when Digest authentication is enabled with...

CVE-2021-40438

CVE-2021-40438 Уязвимость пересылки запросов Apache CVE-2021-40438: Специально сформированный путь в URI запроса может привести к тому, что modproxy перешлёт запрос на исходный сервер, выбранный удалённым пользователем. Эта уязвимость затрагивает Apache HTTP Server 2.4.48 и более ранние версии...

CVE-2021-4034

PwnBringer автоматическая генерация и раздача PwnKit компилирует исходный код в бинарник для pwnkit и автоматически запускает python-сервер, это Прототип поэтому может не работать в зависимости от окружения. chmod +x PwnBringer.py ./PwnBringer.py Сторона жертвы user1@deb:$ wget...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI и RCE эксплойт Информация Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CV...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

Эксплойт для CVE-2021-41773 и CVE-2021-42013 Атака path traversal и RCE в Apache/2.4.49-2.4.50 Возможности - Принимает список URL - Работает как для CGI, так и для non-CGI - Работает для Apache/2.4.49 - 2.4.50 Использование $ git clone...

CVE-2024-40275_Scanner

Сканер CVE-2024-40725 Инструмент обнаружения на Python для CVE-2024-40725 — уязвимости раскрытия исходного кода в Apache HTTP Server, затрагивающей версии 2.4.0 и 2.4.61. Правовое уведомление: Запускайте этот сканер только против серверов, которыми вы владеете или на тестирование которых имеете...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Эксплуатация переполнения буфера Apache modlua 📋 Обзор Apache modlua Buffer Overflow Exploitation — это продвинутая платформа эксплуатации корпоративного уровня для CVE-2021-44790 , критической уязвимости переполнения буфера в модуле modlua веб-сервера Apache HTTP Server 2.4.x...

CVE-2026-63686

The Apache HTTP Server (versions before 2.4.69 ) is vulnerable to a NULL pointer dereference within the mod_xml2enc module. An untrusted backend server can trigger a Denial of Service (DoS) by returning a crafted response with a character set that partially succeeds and then fails during conversi...

CVE-2026-63686 Apache HTTP Server: mod_xml2enc crash on charset conversion failure

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

EUVD-2026-90912

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

EUVD-2026-90910

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

CVE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

CVE-2026-93546

The Apache HTTP Server (version 2.4.68 and prior) is vulnerable to an integer overflow in the mod_dav_fs component. An authenticated WebDAV client with write access can crash worker processes and cause persistent corruption of a directory's property database. This is achieved by sending PROPPATCH...

CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...