1043 matches found
CVE-1999-0678
CVE-1999-0678：检测与修复项目 作者： Pham Huu Minh 日期： 2025年12月 项目概述 本项目展示了漏洞评估的完整生命周期，特别针对 Apache Web 服务器上的遗留目录遍历漏洞 CVE-1999-0678 。目标是模拟攻击、使用 IDS 检测并永久修复该安全漏洞。 技术栈 攻击者： Kali Linux Curl, Firefox, GVM 受害者： Ubuntu Server Apache2, Snort IDS 工具： Greenbone Vulnerability Manager, Snort, Iptables 阶段 1：发现与利用...
webui
Copyright C 2003-2021 Young Consulting, Inc Este programa es software libre; usted puede redistribuirlo y/o modificarlo bajo los términos de la Licencia Pública General de GNU publicada por la Free Software Foundation; ya sea la versión 2 de la Licencia, o a su elección cualquier versión posterio...
Mobile-Drop-Device-SOC-Detection
🛡️ Project Phantom: モバイル「ドロップデバイス」SOC検出シミュレーション このプロジェクトは、内部ネットワーク内で「ドロップデバイス」として使用される不正なroot化されていないAndroidデバイス（Casper Via S）が、重要なLayer 7攻撃（Webスキャン、RCE）を開始した際にWazuh SIEMによってどのように検出されるかをシミュレートする、エンドツーエンドのSOCラボワークショップを示しています。...
Astra Linux – Vulnerability in Apache2
A timing attack against modauthdigest in Apache HTTP Server 2.4.66 allows a remote attacker to bypass Digest authentication. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
Astra Linux – Vulnerability in Apache2
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier...
Astra Linux – Vulnerability in Apache2
Delayed memory release after the effective lifetime vulnerability in the Apache HTTP Server. This issue affects the Apache HTTP Server: from version 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes this issue...
Astra Linux – Vulnerability in Apache2
HTTP/2 incoming headers that exceed the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client continues to send headers, this can lead to memory exhaustion...
Astra Linux – Vulnerability in Apache2
An HTTP response smuggling vulnerability exists in the Apache HTTP Server via modproxyuwsgi. This issue affects the Apache HTTP Server: from version 2.4.30 through 2.4.55. Special characters in the origin response header can cause the response forwarded to the client to be truncated or split...
Astra Linux – Vulnerability in Apache2
When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...
Astra Linux – Vulnerability in Apache2
Apache HTTP Server 2.4.52 and earlier fail to close inbound connections when errors occur during the discarding of the request body, exposing the server to HTTP Request Smuggling attacks...
Astra Linux – Vulnerability in Apache2
The vulnerability of “Allocation of Resources Without Limits or Throttling” in Apache HTTP Server’s modmd, through OCSP response data. This issue affects Apache HTTP Server versions 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
Astra Linux – Vulnerability in Apache2
Improper neutralization of vulnerabilities related to escape, meta, or control sequences in the Apache HTTP Server, caused by unexpected overrides of variables calculated by the server for CGI programs, through environment variables set via Apache configuration. This issue affects the Apache HTTP...
SUSE-SU-2026:2641-1 Security update for apache2
This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...
CVE-2026-19728
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to a customer-uploaded file before serving it, allowing unauthenticated users who obtain a file's stored name to retrieve it. The Extra Product Options Builder for...
Exploit for Path Traversal in Apache Http_Server
No d...
Exploit for Path Traversal in Apache Http_Server
No d...
ROS-20260727-73-0023
A vulnerability in httpd related to information disclosure in an invalid data area. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...
ROS-20260727-73-0022
A vulnerability in the modlda module of the Apache HTTP Server is related to a use-after-free condition. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service...
ROS-20260727-73-0020
A vulnerability in httpd related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...