11 matches found
linux-apache-fix-mod_rewrite-spaceInURL
修复 Linux Ubuntu Apache modrewrite 中 URL 包含空格的问题 在最近的 Apache 升级后，我在 modrewrite 中遇到了“URL 中包含空格”的问题。 2023-04-25 - 升级 apache2:amd64 2.4.38-3+deb10u9 → 2.4.38-3+deb10u10 包含“空格”且已被替换为 %20 的 URL 开始被 Apache 返回 403 错误。 我发现此次更新实际上是为了修复以下问题：...
CVE-2006-3747
Files about my bugtraq publication and first working exploit for CVE-2006-3747 Apache modrewrite LDAP off-by-one buffer overflow. http://www.securityfocus.com/archive/1/443870 Public release date of POC/Exploit: 2006-08-20 Author: Jacobo Avariento Gimeno CVE id: CVE-2006-3747 Bugtraq id: 19204 CE...
CVE-2024-38475
CVE-2024-38475 利用CVE-2024-38475（modrewrite漏洞与文件系统路径匹配） 此仓库包含一个用于测试Web服务器漏洞的Python脚本，专门针对Apache服务器。该脚本使用目录和文件的词表检查潜在问题（modrewrite漏洞与文件系统路径匹配），并通过各种载荷暴露源码。 使用方法： 使用以下命令运行脚本： root@kitploit: python3 script.py --webroots webroots.txt --url 127.0.0.1 --schema http --directorywordlist...
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
Summary The default .htaccess shipped with Grav and the reference webserver-configs/htaccess.txt contains security rules that block direct HTTP access to sensitive file types .yaml, .yml, .php, .json, .twig, etc. under user/ and system/vendor/ directories. However, these rules lack the NC No Case...
Linux Distros Unpatched Vulnerability : CVE-2024-39573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential SSRF in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled ...
The vulnerability of the mod_rewrite function in the Apache HTTP Server allows attackers to gain unauthorized access to confidential information or affect the accessibility of that information.
The vulnerability of the modrewrite function in the Apache HTTP Server relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information or influence the accessibility of information through...
JSP vulnerabilities large-vulnerability warning-the black bar safety net
Overview: The server vulnerability is a security Origin, a hacker on the site of the attack is also mostly from the Find each other's vulnerabilities. So only understand its own vulnerability, the site managers to take appropriate measures to prevent foreign attacks. The following describes some ...
POC & exploit for Apache mod_rewrite off-by-one
Public release date of POC/Exploit: 2006-08-20 Author: Jacobo Avariento Gimeno CVE id: CVE-2006-3747 Bugtraq id: 19204 CERT advisory: VU395412 Severity: high Introduction ---- On July 28 2006 Mark Dowd McAfee Avert Labs reported a vulnerability found in modrewrite apache module to the bugtraq...
CVE-2003-0542
Multiple stack-based buffer overflows in 1 modalias and 2 modrewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service crash or execute arbitrary code via a regular expression with more than 9 captures...
Linux news 9.10.00
Linus: Linux Kernel 2.4 задерживается. Опять... Пришло сообщение о том, что ядро Linux 2.4 задерживается как минимум еще на два месяца... Подробнее: http://slashdot.org/articles/00/10/06/2053240.shtml Snes9x 1.32 Вышла новая версия Super Nintendo Entertainment System SNES emulator-а - Snes9x 1.32...