Astra Linux – Vulnerability in Apache2

A out-of-bounds read vulnerability exists in the modmacro module of the Apache HTTP Server. This issue affects the Apache HTTP Server version up to 2.4.57...

BIT-APACHE-2026-56153 Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

BIT-APACHE-2026-48005 Apache HTTP Server: mod_auth_digest reauthentication attack

Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced re-authentication via forged Authorization headers when Digest authentication is enabled with...

BIT-APACHE-2026-47360 Apache HTTP Server: mod_session: Session cookie not removed during internal redirect

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's modsessioncookie module. When SessionCookieRemove changes across internal redirects, the session cookie may still be passed to a backend server. This issue affects Apache HTTP Server: from 2.4.0...

BIT-APACHE-2026-46729 Apache HTTP Server: mod_heartmonitor denial of service

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

BIT-APACHE-2026-42528 Apache HTTP Server: mod_dav shared lock overflow

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

BIT-APACHE-2026-42356 Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by modmime. This issue affects...

BIT-ENVOY-2020-8659

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small i.e. 1 byte chunks...

http-terminator

http-terminator Исследовательский конвейер с поддержкой ИИ для обнаружения и эксплуатации уязвимостей HTTP-контрабанды запросов / десинхронизации ответов. Опубликован как справочное сопровождение к исследованию; части являются исполняемыми см. матрицу ниже. Конвейер URL / RFC ──▶ seeker ──▶ flame...

CVE-2024-57778

CVE-2024-57778 Description : An issue in Orbe ONetView Roteador Onet-1200 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. Versions : Discovered in Orbe ONetView Roteador Onet-1200 Orbe 1680210096, but applicable to all versions up...

cve-2021-41773

Cve-2021-41773-grabber Уязвимость обхода пути и раскрытия файлов в Apache HTTP Server 2.4.49 Этот скрипт собирает уязвимые серверы для CVE-2021-41773 из Shodan Как использовать : используйте Python 3 установите модуль shodan " pip install shodan" измените ключевое слово в скрипте на ваше ключевое...

[SECURITY] [DLA 4821-1] perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 05, 2026 https://wiki.debian.org/LTS -...

CVE-2025-55182

CVE-2025-55182 — React2Shell Critical Remote Code Execution in React Server Components. Severity: CRITICAL | CVSS v3.1: 10.0 Maximum | Status: Actively Exploited What Is This? React2Shell is a critical security vulnerability in React Server Components RSC — a modern feature that lets React run...

CVE-2025-60752

CVE-2025-60752 PoC of CVE-2025-60752 Affected product: Tinyc Http Server The full writeup article is available at https://zer0matt.blogspot.com/2026/05/cve-2025-60752-tinyc-http-server-stack.html Description A stack buffer overflow occurs when Tinyc receives a crafted input. The overflow occurs...

docker-lab-cve-2017-5638-cve-2021-41773

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-based attack emulation lab designed to demonstrate a multi-stage kill chain, lateral movement, and multi-point IDS detection. Overview This lab simulates a realistic network environment where an attacker progresses from initial...

CVE-2026-88881

A flaw was found in Renovate that leads to information disclosure. When processing paginated responses from a configured repository or datasource server, Renovate fails to validate pagination URLs provided in the HTTP Link header against the originating host before transmitting credentials. A...

CVE-2019-9978-Python3

CVE-2019-9978-Python3 python3 version of the CVE-2019-9978 exploit To Do http server 2024 update this might still be a good programming challenge not sure what htb/thm machine will apply for testing...

K000163542: undici vulnerability CVE-2026-6733

Security Advisory Description Impact: Undici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the...

CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit

CVE-2023-44487 HTTP/2 DoS Rapid Reset Exploit Professional Edition v1.0.1 | Author: Sudeepa Wanigarathna -orange.svg Table of Contents Overview Vulnerability Details Features Requirements Installation Quick Start Usage Guide Configuration Options Docker Support Examples Understanding Results...

CVE-2025-24893-PoC

CVE-2025-24893 – XWiki Remote Command Execution Proof of Concept Overview This repository contains a controlled Proof of Concept PoC for CVE-2025-24893 , an unauthenticated Remote Command Execution RCE vulnerability affecting XWiki. The vulnerability allows an attacker to execute arbitrary...