Astra Linux – vulnerability in Apache2

A privilege escalation bug in various modules within Apache HTTP 2.4.66 and earlier enables local .htaccess authors to read files using the privileges of the httpd user. Users are advised to upgrade to version 2.4.67, which resolves this issue...

Astra Linux – vulnerability in Apache2

Improper null termination and out-of-bounds read vulnerabilities in Apache HTTP Server. This issue affects Apache HTTP Server versions up to and including 2.4.66. Users are advised to upgrade to version 2.4.67, which resolves the issue...

Astra Linux – vulnerability in Apache2

HTTP response splitting in multiple modules within the Apache HTTP Server enables attackers capable of injecting malicious response headers into backend applications, thereby triggering an HTTP desynchronization attack. Users are advised to upgrade to version 2.4.59, which resolves this issue...

Astra Linux – vulnerability in Apache2

Apache HTTP Server versions 2.4.6 through 2.4.46: The modproxywstunnel module was configured on a URL that was not necessarily upgraded by the origin server. This caused it to tunnel the entire connection regardless, thereby allowing subsequent requests on the same connection to be processed...

Astra Linux – vulnerability in Apache2

Double free and potential RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

Astra Linux – Vulnerability in Apache2

A carefully crafted If: request header can cause a memory read, or a write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

ROS-20260715-73-0009

The vulnerability of the ajpparsedata function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...

APACHE-2.4.49-2.4.50-exploit

CVE-2021-42013-PoC A lightweight, interactive Bash utility de...

K000161669: Apache HTTP Server vulnerabilities CVE-2026-24072 and CVE-2026-23918

Security Advisory Description CVE-2026-24072 An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora. The vulnerability has been codenamed HTTP/2 Bomb by Calif. "The vulnerable behavior exists in each server's...

Linux Distros Unpatched Vulnerability : CVE-2026-24072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the http...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-...

About the security content of macOS Sonoma 14.8.5

About the security content of macOS Sonoma 14.8.5 This document describes the security content of macOS Sonoma 14.8.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-65082)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-65082 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP...

Apache Vulnerability Scanner

Scans for Apache-specific vulnerabilities, version information, misconfigurations, and exposed sensitive files !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient import re import urllib.parse class ModuleAuxiliary, Httpclient: in...

MiracleLinux 3 : httpd-2.2.3-31.4.0.1.AXS3 (AXSA:2010-165:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-165:01 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed in this release: CVE-2010-0408 The approxyajpreques...

MiracleLinux 3 : httpd-2.2.3-53.3.0.1.AXS3 (AXSA:2011-346:03)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-346:03 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2011-3368 The modproxy module in the...

MiracleLinux 3 : httpd-2.2.3-22.1.1AXS3 (AXSA:2009-63:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-63:01 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Fixed bugs: CVE-2008-1678 Memory leak in the zlibstatefulinit function in...

Astra Linux – vulnerability in Apache2

The moduserdir+suexec bypass vulnerability via the AllowOverride FileInfo flaw in the Apache HTTP Server allows users with access to the RequestHeader directive in htaccess to cause certain CGI scripts to execute under an unintended user ID. This issue affects Apache HTTP Server versions 2.4.7...

PT-2026-1422

CVE-2025-69290 - Apache Unassigned Vulnerability CVE ID : CVE-2025-69290 Published : Jan. 5, 2026, 7:15 p.m. | 2 hours, 35 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues...