1043 matches found
webui
Copyright C 2003-2021 Young Consulting, Inc Este programa es software libre; usted puede redistribuirlo y/o modificarlo bajo los términos de la Licencia Pública General de GNU publicada por la Free Software Foundation; ya sea la versión 2 de la Licencia, o a su elección cualquier versión posterio...
Mobile-Drop-Device-SOC-Detection
🛡️ Proyecto Phantom: Simulación de Detección SOC de "Drop Device" Móvil Este proyecto demuestra un taller de laboratorio SOC de extremo a extremo que simula cómo un dispositivo Android no autorizado y sin root Casper Via S, utilizado como "Drop Device" dentro de una red interna, es detectado a...
CVE-1999-0678
CVE-1999-0678: Proyecto de Detección y Remediación Autor: Pham Huu Minh Fecha: diciembre de 2025 Descripción general del proyecto Este proyecto demuestra el ciclo de vida completo de una evaluación de vulnerabilidades, dirigido específicamente a la vulnerabilidad heredada de Directory Traversal...
Astra Linux – Vulnerability in Apache2
A timing attack against modauthdigest in Apache HTTP Server 2.4.66 allows a remote attacker to bypass Digest authentication. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
Astra Linux – Vulnerability in Apache2
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier...
Astra Linux – Vulnerability in Apache2
HTTP/2 incoming headers that exceed the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client continues to send headers, this can lead to memory exhaustion...
Astra Linux – Vulnerability in Apache2
An HTTP response smuggling vulnerability exists in the Apache HTTP Server via modproxyuwsgi. This issue affects the Apache HTTP Server: from version 2.4.30 through 2.4.55. Special characters in the origin response header can cause the response forwarded to the client to be truncated or split...
Astra Linux – Vulnerability in Apache2
When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...
Astra Linux – Vulnerability in Apache2
The vulnerability of “Allocation of Resources Without Limits or Throttling” in Apache HTTP Server’s modmd, through OCSP response data. This issue affects Apache HTTP Server versions 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
Astra Linux – Vulnerability in Apache2
Improper neutralization of vulnerabilities related to escape, meta, or control sequences in the Apache HTTP Server, caused by unexpected overrides of variables calculated by the server for CGI programs, through environment variables set via Apache configuration. This issue affects the Apache HTTP...
SUSE-SU-2026:2641-1 Security update for apache2
This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...
Astra Linux – Vulnerability in Apache2
Apache HTTP Server 2.4.52 and earlier fail to close inbound connections when errors occur during the discarding of the request body, exposing the server to HTTP Request Smuggling attacks...
Astra Linux – Vulnerability in Apache2
Delayed memory release after the effective lifetime vulnerability in the Apache HTTP Server. This issue affects the Apache HTTP Server: from version 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes this issue...
CVE-2026-19728
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to a customer-uploaded file before serving it, allowing unauthenticated users who obtain a file's stored name to retrieve it. The Extra Product Options Builder for...
Exploit for Path Traversal in Apache Http_Server
No d...
Exploit for Path Traversal in Apache Http_Server
No d...
ROS-20260727-73-0022
A vulnerability in the modlda module of the Apache HTTP Server is related to a use-after-free condition. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service...
ROS-20260727-73-0023
A vulnerability in httpd related to information disclosure in an invalid data area. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...