CVE-2021-31166

CVE-2021-31166 説明 - CVE-2021-31166 の POC: Windows HTTP プロトコルスタックのリモートコード実行脆弱性 - antx によって 2021-09-27 に作成されました。 詳細 - ./trigger.gifPoc-Gif CVE 重要度 - attackComplexity: LOW - attackVector: NETWORK - availabilityImpact: HIGH - confidentialityImpact: HIGH - integrityImpact: HIGH -...

CVE-2021-31166

CVE-2021-31166 0x00.Descripción Esta es una prueba de concepto para CVE-2021-31166 "Vulnerabilidad de ejecución remota de código en la pila de protocolos HTTP", una desreferencia de use-after-free en http.sys corregida por Microsoft en mayo de 2021. Hasta donde sé, solo puede provocar el bloqueo...

EUVD-2026-73630

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

EUVD-2026-73031

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

Windows HTTP Print Provider Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

CVE-2026-62750

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

EUVD-2026-56372

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

Windows HTTP Protocol Stack Tampering Vulnerability

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

PT-2026-70510

Name of the Vulnerable Software and Affected Versions Windows HTTP Protocol Stack affected versions not specified Description A partial string comparison issue in the Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network, which can affect the...

FTP Fetch, Windows shellcode stage, Windows Reverse HTTP Stager (winhttp)

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Tunnel communication over HTTP Windows winhttp Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule includ...

CVE-2026-21240

Time-of-check time-of-use toctou race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

EUVD-2010-5298

Malware in sbrugna...

CVE-2025-53805

CVE-2025-53805 affects Windows Internet Information Services (IIS) via an out-of-bounds read in HTTP.sys, enabling an unauthenticated attacker to deny service over the network. The vulnerability is categorized as Denial-of-Service with network attack vector and high severity (CVSS 7.5, NETWORK/NO...

CVE-2010-10012

A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal...

CVE-2010-10012

Affected product: httpdasm 0.92 (Windows HTTP server). Issue: path traversal via a crafted GET containing URL-encoded backslashes and directory traversal patterns allows unauthenticated read of arbitrary host files, escaping the web root. Root cause: directory traversal flaw enabling access outsi...

CVE-2010-10012 httpdASM 0.92 Path Traversal

A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal...

CVE-2010-10012 httpdASM 0.92 Path Traversal

A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal...

New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants

Cisco Talos recently discovered a new malware family were calling "HTTPSnoop" being deployed against telecommunications providers in the Middle East. HTTPSnoop is a simple, yet effective, backdoor that consists of novel techniques to interface with Windows HTTP kernel drivers and devices to liste...

The vulnerability of the HTTP-protocol implementation (http.sys) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the HTTP-protocol implementation http.sys in Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTTP/3 request from a remote location...