DavRelayUp

DavRelayUp Un port rapide et sale de KrbRelayUp avec des modifications pour permettre le relai NTLM de webdav vers LDAP afin de simplifier l'exploitation de la primitive d'attaque suivante : 0. Optionnel Création d'un nouveau compte machine New-MachineAccount 1. Forcer le démarrage du service...

davscan

DAVScan DAVScan est un scanner webdav rapide et léger conçu pour découvrir des fichiers et dossiers cachés sur les serveurs web DAV activés. Le scanner fonctionne en exploitant les serveurs WebDAV trop privilégiés/mal configurés ou les serveurs vulnérables à diverses vulnérabilités de divulgation...

CVE-2026-27654-PoC

CVE-2026-27654 – PoC обработки путей DAV alias в модуле nginx ngxhttpdavmodule Этот репозиторий содержит концепт‑эксплойт для CVE‑2026‑27654 — уязвимости переполнения кучи в модуле ngxhttpdavmodule nginx. Ошибка возникает из‑за целочисленного потери значимости underflow типа sizet при обработке...

httpd: httpd: Information disclosure via direct request to the WebDAV state directory

A flaw was found in the moddavfs module of the Apache HTTP Server. A remote attacker can exploit this vulnerability by sending an HTTP GET request directly to the internal WebDAV Web Distributed Authoring and Versioning state directory. This allows unauthorized access to internal state files,...

CVE-2026-58415

A flaw was found in the moddavfs module of the Apache HTTP Server. A remote attacker can exploit this vulnerability by sending an HTTP GET request directly to the internal WebDAV Web Distributed Authoring and Versioning state directory. This allows unauthorized access to internal state files,...

CVE-2026-42528

A flaw was found in the moddav module of the Apache HTTP Server. This vulnerability allows a Denial of Service DoS by crashing server child processes. An attacker with permission to create Web Distributed Authoring and Versioning WebDAV locks can trigger a memory calculation error during lock...

Linux Distros Unpatched Vulnerability : CVE-2026-58415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote...

RP_RecordClip_DLL_Hijack

Remote DLL Hijack Vulnerability in Real Player CVE-2022-32291 The Player application which is vulnerable upon starting Real Converter and the Recording Manager are prone to a remote DLL hijack binary planting issue because of unsafe search for unexisting DLLs. To exploit the issue attackers would...

CVE-2026-58415

Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

DEBIAN-CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-58415 Apache HTTP Server: mod_dav_fs property database read access

Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

CVE-2026-42528 Apache HTTP Server: mod_dav shared lock overflow

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

EUVD-2026-90885

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-42528 Apache HTTP Server: mod_dav shared lock overflow

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-42528

A memory calculation bug in the mod_dav module of Apache httpd version 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to trigger a crash in server child processes. This vulnerability is characterized as a mod_dav shared lock overflow . To mitigate this issue, users a...

CVE-2026-20841

CVE-2026-20841 PoC PoC уязвимости "Windows Notepad RCE". Отказ от ответственности 1. Я НЕ тот, кто обнаружил эту уязвимость. Респект оригинальным авторам, указанным на официальной странице раскрытия. Я просто воссоздал PoC по описанию. 2. Лично я не считаю, что эта уязвимость настолько серьезна,...

CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 Preuve de concept Ce dépôt fournit des scripts pour déployer automatiquement un serveur WebDAV sur Ubuntu avec Apache2 , et générer des fichiers de raccourci.url malveillants destinés au phishing, au red teaming ou à la simulation de mouvement latéral. 📁 Contenu setupwebdav.sh –...

CVE-2017-7269

CVE-2017-7269 - IIS 6.0 WebDAV Buffer Overflow Реализация POC для CVE-2017-7269 на языке Rust, нацеленная на службу WebDAV в Microsoft Internet Information Services IIS 6.0. Обзор уязвимости CVE-2017-7269 — это критическая уязвимость переполнения буфера на основе стека, обнаруженная в службе WebD...

PT-2026-103923

A memory calculation bug in mod dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...