Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Apache modlua Buffer Overflow Exploitation 📋 Overview Apache modlua Buffer Overflow Exploitation is an advanced, enterprise-grade exploitation platform for - a critical buffer overflow vulnerability in the Apache HTTP Server 2.4.x module. This framework provides comprehensive...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

apache2.4.49VulnerableLabSetup

apache2.4.49VulnerableLabSetup CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. This repo is to simulate the vulnerability...

ESFileExplorerOpenPortVuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447 As per their Google Play description: ES File Explorer File Manager is a full-featured file Images, Music, Movies, Documents, app manager for both local and networked use! With over 500 million users worldwide, ES File Explorer File Manager...

Follina-CVE-2022-30190-Sample

Follina-CVE-2022-30190-Sample-by-ethical-blue Educational Follina Tool Version history v1.1 — JavaScript payload obfuscation v1.0 — Initial release Features .RTF payload generator Simple HTTP Server for payload Mitigation tips Configuration extractor Easy to use for learning Exploit Executed...

CVE-2006-20001

CVE-2006-20001 A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. authentication| complexity|...

cve-2025-66723

CVE-2025-66723: inMusic Brands Engine DJ =3.0.0 through 4.3.4 exposes local and network files to external parties Synopsis inMusic Brands software Engine DJ contains an embedded HTTP server for transmitting media library files to connected clients on the network. The media files are referenced by...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...

CVE-2021-41773

CVE-2021-41773 Path traversal in Apache HTTP Server 2.4.49 CVE-2021-41773 For educational purposes only Test Set up the PoC environment root@kitploit: $ docker build -t cve-2021-41773 . $ docker run --rm -dit -p 8000:80 cve-2021-41773 Confirm it works root@kitploit: $ curl http://localhost:8000 I...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...

HTTPUploadExfil

HTTPUploadExfil HTTPUploadExfil is a very simple HTTP server written in Go that's useful for getting files and other information off a machine using HTTP. While there are many use-cases, it's meant to be used in low-stakes offensive scenarios e.g., CTFs. Think of this as python3 -m http.server bu...

Goahead-CVE-2017-17562

Goahead-CVE-2017-17562...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 A small explanation of an Apache path traversal bug and an incomplete fix Task 1: A Bit of Background... A Brief History On the 5th of October 2021, a CVE detailing a path traversal attack on Apache...

Security Bulletin: IBM i is Affected By a Denial of Service in HTTP Server [CVE-2026-17272]

Summary IBM i is vulnerable to a denial of service from an out-of-bounds write CVE-2026-17272 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17272 DESCRIPTION: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of...

cve-2021-41773-exploration

Overview CVE-2021-41773 is a path traversal vulnerability discovered in Apache HTTP Server 2.4.49 in October 2021. The root cause was a failure to properly normalize dot sequences ended into the URL before checking whether requested path stayed within the web root. This vulnerability allowed an...

it355-lab4-enterprise-lan-security

IT355 Lab 4: Enterprise LAN Security & Shellshock Analysis 📌 Project Overview This repository contains a comprehensive security assessment of an enterprise LAN environment. The core focus of this project was the identification, exploitation, and remediation of the Shellshock CVE-2014-6271...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

CVE-2016-10140-Zoneminder-Poc

ZoneMinder Unauthorized Access CVE-2016-10140 Poc -- Batch Verification Script Vulnerability Description ZoneMinder is an open-source video surveillance system. When abnormal events occur, you can receive email or SMS notifications. There is an information disclosure and authentication bypass...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc

A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...