ROOT-APP-MAVEN-CVE-2026-54399 CVE-2026-54399 in org.apache.httpcomponents.core5:httpcore5 - Patched by Root

Root has patched CVE-2026-54399 in the org.apache.httpcomponents.core5:httpcore5 package for Root:Maven. Multiple fixed versions available...

CVE-2021-41773

CVE-2021-41773 Path traversal en Apache HTTP Server 2.4.49 CVE-2021-41773 Solo con fines educativos Prueba Configurar el entorno del PoC root@kitploit: $ docker build -t cve-2021-41773 . $ docker run --rm -dit -p 8000:80 cve-2021-41773 Confirmar que funciona root@kitploit: $ curl...

CVE-2021-41773h

CVE-2021-41773 Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 CVE-2021-41773 Información Se encontró una falla en un cambio realizado en la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal para asigna...

Apache HTTP Server - Remote Code Execution

Apache HTTP Server 2.4.32 to 2.4.44 contains an info disclosure and possible remote code execution caused by a vulnerability in modproxyuwsgi, letting remote attackers access sensitive information and potentially execute arbitrary code, exploit requires sending crafted requests. id: CVE-2020-1198...

Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. id: CVE-2019-10098 info: name: Apache HTTP server v2.4.0 to v2.4.39 - Open...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 POC con Docker Configuración Para personalizar el archivo httpd.conf, cambie la línea 251 en la sección de Require all denied a Require all granted. root@kitploit: AllowOverride none Require all granted Crear un Dockerfile en tu proyecto root@kitploit: FROM...

CVE-2021-41773-PoC

CVE-2021-41773 Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 Este script prueba Apache HTTP Server 2.4.49 Uso: CVE-2021-41773.py opciones Solo para una IP: python CVE-2021-41773.py IPaddress Opción -f Para lista de IPs en un archivo Ejemplo: python...

httpd-2.4.49

httpd-2.4.49 crítico: Recorrido de Rutas y Ejecución Remota de Código en Apache HTTP Server 2.4.49 y 2.4.50 solución incompleta de CVE-2021-41773 CVE-2021-42013...

cve-2021-41773

Apache httpd RCE Se encontró una falla en un cambio realizado a la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal para asignar URLs a archivos fuera de los directorios configurados por directivas tipo Alias. Si los archivos fuera de estos...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 Cómo ejecutar el laboratorio CVE-2021-41773 - Path Traversal 1. Instale y ejecute Docker en su PC/Portátil 2. Clone este repositorio de GitHub 3. Vaya a la carpeta Path Traversal 4. Ingrese los siguientes comandos docker build -t...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000283 advisory. A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This cou...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090052 advisory. In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003821 advisory. In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody0 may cause a denial of service due to no default limit on possib...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090058 advisory. In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the PROXY protocol, a specially crafted PROXY...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090055 advisory. In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the erro...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090042 advisory. A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000282 advisory. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to th...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000273 advisory. Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003827 advisory. Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request...

CVE-2026-49975

CVE-2026-49975 Bomba HTTP/2 ★ CVE-2026-49975 PoC de Bomba HTTP/2 ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Resumen CVE-2026-49975 es una vulnerabilidad de Denegación de Servicio DoS en Apache HTTP Server. La vulnerabilidad ocurre en la ruta de manejo de...