CVE-2021-41773_CVE-2021-42013_Exploits

استغلال CVE-2021-41773 و CVE-2021-42013 نظرة عامة يركز هذا المستودع على استغلال ثغرتين في Apache HTTPD: CVE-2021-41773 و CVE-2021-42013. تمثل هذه الثغرات CVEs ثغرات اجتياز المسار التي قد تؤدي إلى تعيين الملفات وتنفيذ التعليمات البرمجية عن بُعد على خوادم Apache HTTPD. للحصول على معلومات متعمقة حول...

Astra Linux – Vulnerability in Subversion

Apache Subversion SVN’s “authz” feature prevents the display of “copyfrom” paths that should be hidden according to configured path-based authorization rules. When a node is copied from a protected location, users with access to the copy can see the “copyfrom” path of the original node. This also...

CVE-2019-17147

CVE-2019-17147: استغلال ثغرة TP-Link TL-WR841N نظرة عامة يُوثّق هذا المستودع عملية الهندسة العكسية الشاملة واستغلال ثغرة CVE-2019-17147 ، وهي ثغرة حرجة من نوع تنفيذ التعليمات البرمجية عن بعد RCE في راوتر TP-Link TL-WR841N معمارية MIPSEL. توجد الثغرة في خادم الويب httpd، حيث يؤدي التحقق غير الصحيح...

R7000_httpd_BOF_CVE-2020-15416

R7000httpdBOFCVE-2020-15416 لقد أوضحت لك كيفية إعداد بيئة تصحيح الأخطاء باستخدام وضع مستخدم QEMU لراوتر Netgear R7000 اللاسلكي. ثم أقدم دليلًا تفصيليًا لاستغلال ثغرة تجاوز سعة المخزن المؤقت في httpd الخاصة براوتر Netgear اللاسلكي CVE-2020-15416. وهي تشير إلى...

CVE-2025-41244

💻 Processus technique pas à pas Compiler le programme bash Compilez le code C en un exécutable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Rendez-le exécutable chmod +x /tmp/httpd Tester la fonctionnalité de version bash Testez l'option -v devrait afficher la version et quitter /tmp/httpd -v Testez...

CVE-2021-26690---Apache-mod_session

مقارنة التصحيحات لـ CVE-2021-26690 - وحدة Apache modsession هذه الثغرة هي إلغاء مرجعية مؤشر فارغ NULL pointer dereference داخل وحدة modsession الخاصة بـ Apache. سيؤدي ذلك إلى رفض الخدمة Denial of Service لعمليات الأطفال child processes لخادم httpd الخاص بـ Apache. باستخدام حلقة تكرارية، سيتعطل كل...

CVE-2021-41773_42013

إعداد مختبر CVE-2021-41773 و CVE-2021-42013 الإعداد $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache ملاحظة: ملفات httpd.conf مهيأة لتكون عرضة لـ RCE افتراضيًا. لإعداد Path...

apache_audit_cve-2026-23918

cve-2026-23918 Outils d'audit défensif pour CVE-2026-23918 double-free RCE HTTP/2 d'Apache HTTPD et quatre CVE associées divulguées dans l'avis de sécurité de la Apache Software Foundation du 4 mai 2026. CVE| Sévérité| Composant| Impact| Versions concernées ---|---|---|---|--- CVE-2026-23918|...

CVEs

CVEs Proof of concept exploits for various CV...

[SECURITY] Fedora 45 Update: gridsite-3.0.0-0.40.20260121git7a7b764.fc45

GridSite was originally a web application developed for managing and formatti ng the content of the http://www.gridpp.ac.uk/ website. Over the past years it has grown into a set of extensions to the Apache web server and a toolkit for Grid credentials, GACL access control lists and HTTPS protocol...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: httpd: httpd-2.4.69-1.hum1 aarch64, x8664 httpd-core-2.4.69-1.hum1 aarch64, x8664 httpd-devel-2.4.69-1.hum1 aarch64, x8664 httpd-filesystem-2.4.69-1.hum1 noarch httpd-manual-2.4.69-1.hum1 noarch...

httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite

A flaw was found in httpd's modcharsetlite module. A heap-based buffer overflow an out-of-bounds memory write occurs in the finishpartialchar function when handling character set conversions. A remote attacker can exploit this flaw by sending specially crafted requests, leading to memory...

httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response

A flaw was found in httpd. When configured as a forward proxy using the modproxyftp module, the server improperly validates the network address returned in a File Transfer Protocol FTP passive mode PASV response. A malicious FTP server can exploit this flaw by returning a crafted reply, forcing t...

httpd: httpd: Authentication state corruption via concurrent Digest authentication requests

A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...

httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2026-73637

A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...

CVE-2026-63045

A flaw was found in httpd. When configured as a forward proxy using the modproxyftp module, the server improperly validates the network address returned in a File Transfer Protocol FTP passive mode PASV response. A malicious FTP server can exploit this flaw by returning a crafted reply, forcing t...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2026-59685

A flaw was found in httpd. When deployed on Windows environments, an out-of-bounds write vulnerability occurs while processing path requests containing short 8.3 file names that expand beyond allocated memory buffers. A remote attacker can exploit this flaw by sending crafted HTTP requests,...