Lucene search
+L

7545 matches found

GithubExploit
GithubExploit
•added 2021/10/09 11:33 a.m.•614 views

Exploit for Path Traversal in Apache Http_Server

cve-2021-41773 and cve-2021-42013 Batch verification of Pyth...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits207
Veracode
Veracode
•added 2021/10/08 9:08 p.m.•187 views

Path Traversal

Apache HTTP Server is vulnerable to path traversal attacks. An attacker could use a path traversal attack to map URLs to the files outside of the document root are not protected by the “require all denied” directive in the Apache configuration file...

9.8CVSS7.9AI score0.99964EPSS
SaveExploits69References36Affected Software1
GithubExploit
GithubExploit
•added 2021/10/08 3:40 p.m.•289 views

Exploit for Path Traversal in Apache Http_Server

CV...

7.5CVSS8.2AI score0.99992EPSS
SaveExploits178
GithubExploit
GithubExploit
•added 2021/10/08 8:32 a.m.•291 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 scanner This script tests for the path t...

7.5CVSS8.1AI score0.99992EPSS
SaveExploits178
GithubExploit
GithubExploit
•added 2021/10/08 4:26 a.m.•332 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 This is my first time trying to make an explo...

7.5CVSS8.2AI score0.99992EPSS
SaveExploits178
Slackware Linux
Slackware Linux
•added 2021/10/08 3:27 a.m.•96 views

[slackware-security] httpd

New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/httpd-2.4.51-i586-1slack14.2.txz: Upgraded. SECURITY: CVE-2021-42013: Path Traversal and Remote Code Execution in Apache...

9.8CVSS7.9AI score0.99964EPSS
SaveExploits69
Wiz blog
Wiz blog
•added 2021/10/08 2:13 a.m.•10 views

Protecting cloud environments from the new critical Apache HTTP Server vulnerability

Learn how to protect cloud environments from the new critical Apache HTTP Server vulnerability...

7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2021/10/08 1:13 a.m.•433 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 This is a sim...

7.5CVSS8.2AI score0.99992EPSS
SaveExploits178
BDU FSTEC
BDU FSTEC
•added 2021/10/08 12:00 a.m.•16 views

Apache HTTP Server Path Traversal

The vulnerability of the Apache HTTP Server is related to deficiencies in path checking for directories. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP request...

10CVSS8.8AI score0.99964EPSS
SaveExploits69References17Affected Software8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2021/10/08 12:00 a.m.•81 views

JVN#51106450: Apache HTTP Server vulnerable to directory traversal

Apache HTTP Server provided by The Apache Software Foundation contains a directory traversal vulnerability CWE-22. Impact A remote attacker may access the unprotected files in "require all denied" placed outside of the document root. Moreover, if CGI scripts are enabled, arbitrary code may be...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits207
OpenVAS
OpenVAS
•added 2021/10/08 12:00 a.m.•109 views

Apache HTTP Server 2.4.49 - 2.4.50 Directory Traversal / RCE Vulnerability - Linux

Apache HTTP Server is prone to a directory traversal and a possible remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

8.3AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/10/08 12:00 a.m.•66 views

Apache HTTP Server 2.4.49 - 2.4.50 Directory Traversal / RCE Vulnerability - Active Check

Apache HTTP Server is prone to a directory traversal and a possible remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.4AI score0.99964EPSS
SaveExploits69References3
OpenVAS
OpenVAS
•added 2021/10/08 12:00 a.m.•72 views

Apache HTTP Server 2.4.49 - 2.4.50 Directory Traversal / RCE Vulnerability - Windows

Apache HTTP Server is prone to a directory traversal and a possible remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

8.3AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/10/08 12:00 a.m.•6314 views

Apache 2.4.49 < 2.4.51 Path Traversal Vulnerability

The version of Apache httpd installed on the remote host is 2.4.49 prior to 2.4.51. It is, therefore, affected by a vulnerability as referenced in the 2.4.51 advisory. - It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path...

9.8CVSS7.8AI score0.99992EPSS
SaveExploits207References2
Akamai Blog
Akamai Blog
•added 2021/10/07 8:15 p.m.•220 views

Mitigating CVE-2021-41773: Apache HTTP Server Path Traversal

On September 29, Ash Daulton, along with the cPanel Security Team, reported a path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.29 to the Apache security team. The issue was fixed within two days, under CVE-2021-41773, and the patch was released on October 4. Apache urged...

9.8CVSS7.8AI score0.99992EPSS
SaveExploits178
GithubExploit
GithubExploit
•added 2021/10/07 6:31 p.m.•303 views

Exploit for Path Traversal in Apache Http_Server

apache-exploit-CVE-20...

9.8CVSS8.4AI score0.99964EPSS
SaveExploits69
RedhatCVE
RedhatCVE
•added 2021/10/07 5:33 p.m.•223 views

CVE-2021-42013

A path traversal and remote code execution flaw was found in Apache HTTP Server 2.4.49 and 2.4.50. A remote attacker could use this flaw to map URLs to files outside the expected document root. Additionally, this flaw could leak the source of interpreted files like CGI scripts. If files outside o...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits207References5
osv_alpine
osv_alpine
•added 2021/10/07 4:15 p.m.•25 views

ALPINE-CVE-2021-42013

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS8.3AI score0.99964EPSS
SaveExploits69References1
osv_cve
osv_cve
•added 2021/10/07 4:15 p.m.•105 views

CVE-2021-42013

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS1.5AI score
SaveExploits0References31
UbuntuCve
UbuntuCve
•added 2021/10/07 4:15 p.m.•108 views

CVE-2021-42013

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS8.2AI score0.99964EPSS
SaveExploits69References8
Rows per page
Query Builder