CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE Apache HTTP Server 2.4.49 のパス正規化に対する変更に欠陥が見つかりました。攻撃者はパストラバーサル攻撃を利用して、Alias のようなディレクティブで設定されたディレクトリ外のファイルに URL をマッピングする可能性があります。これらのディレクトリ外のファイルが通常のデフォルト設定「require all denied」で保護されていない場合、リクエストは成功する可能性があります。さらに、これらのエイリアスパスで CGI...

CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 경로 탐색 및 원격 코드 실행 📖 설명 이것은 Apache HTTP Server 2.4.49의 경로 탐색 및 원격 코드 실행 취약점인 CVE-2021-41773에 대한 개념 증명 익스플로잇입니다. 취약점 세부 정보 CVE : CVE-2021-41773 영향을 받는 버전 : Apache HTTP Server 2.4.49 취약점 유형 : 경로 탐색 → 원격 코드 실행 🚀 사용법 설치 git clone...

cybersecurity_portfolio

포트폴리오. 우솔체프 글레브 2학년 학생, 표트르 대제 상트페테르부르크 폴리테크닉 대학교SPbPU 컴퓨터 과학 및 사이버보안 연구소, 전공 10.03.01 "정보 보안". 주식회사 포지티브 테크놀로지스Positive Technologies에서 진행한 교육견학 실습 과정에서 두 가지 실무 케이스를 수행했습니다. 아래에는 학술 보고서 형식이 아닌 기술 자료 형식으로 해당 내용을 정리했습니다. 실습 과제는 반두르코 V. V., 우솔체프 G. V., 우스티얀체프 A. S.로 구성된 교육 그룹의 일원으로 수행했습니다. 케이스 SIEM...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Apache HTTP Server에서 악용된 경로 탐색 제로데이 야생에서 악용된 Apache HTTP Server CVE-2021-41773 CVE-2021-42013: Apache HTTP Server 2.4.49 및 2.4.50의 경로 탐색 및 원격 코드 실행CVE-2021-41773의 불완전한 수정 Shodan 원라이너 shodan search Apache Server 2.4.49 | awk 'print $1":"$2' | while read host do ; do...

CVE-2026-23918-Passive-Audit

Сценарий аудита CVE-2026-23918 В качестве альтернативы можно просто curl заголовки и заглянуть, но вот: Неинвазивный аудитор метаданных HTTP для Apache HTTP Server Триаж экспозиции CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19. Инструмент отправляет обычные HTTP-запросы...

apache-web-log-analysis-lab

Лаборатория анализа веб-журналов Apache Лаборатория Blue Team, посвященная анализу журналов HTTP-сервера Apache для обнаружения активности веб-сканирования, перебора каталогов и попыток обхода пути. Цель Установить и развернуть веб-сервер Apache в изолированной лабораторной среде, смоделировать...

Exploit for Path Traversal in Apache Http_Server

Apache HTTP Server 2.4.49 Path Traversal CVE-2021-41773 Vu...

RLSA-2026:77369 Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

Apache HTTP Server - Remote Code Execution

Apache HTTP Server 2.4.32 to 2.4.44 contains an info disclosure and possible remote code execution caused by a vulnerability in modproxyuwsgi, letting remote attackers access sensitive information and potentially execute arbitrary code, exploit requires sending crafted requests. id: CVE-2020-1198...

mac0352-ep4

mac0352-ep4 Apache HTTP Server 2.4.23 취약점 연구 CVE-2016-8740...

EulerOS 2.0 SP15 : mod_http2 (EulerOS-SA-2026-3926)

According to the versions of the modhttp2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP...

Important: mod_auth_openidc security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791458607)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791458607 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791459292)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791459292 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

CVE-2024-40725

HTTP Request Smuggling 감지 도구 이 저장소는 HTTP Request Smuggling 취약점을 탐지하는 Python 기반 도구를 포함하며, 특히 CVE-2024-40725를 대상으로 합니다. 이 도구는 조작된 HTTP 요청을 보내고 서버의 응답을 분석하여 Apache HTTP Server에서 이 취약점을 악용하려고 시도합니다. 주된 목표는 특정 경로에 대한 제한을 우회하는 등 상태 코드나 접근 동작의 차이를 식별하는 것입니다. 기능 HTTP Request Smuggling 취약점 탐지 단일 URL 테스트 및...

CVE-2021-41773-Apache-Path-Traversal-Lab

Apache CVE-2021-41773 Security Lab A controlled cybersecurity lab developed during my internship at ITSOLERA PVT LTD to study and demonstrate CVE-2021-41773 , a path traversal and potential remote code execution vulnerability affecting Apache HTTP Server 2.4.49. 📌 Project Overview This project...

cve-2021-41773-exploration

Обзор CVE-2021-41773 — это уязвимость обхода пути, обнаруженная в Apache HTTP Server 2.4.49 в октябре 2021 года. Основной причиной была ошибка в нормализации последовательностей точек, оканчивающихся в URL, перед проверкой того, остаётся ли запрошенный путь в пределах корневой директории...

it355-lab4-enterprise-lan-security

IT355 Лабораторная работа 4: Безопасность корпоративной ЛВС и анализ Shellshock 📌 Обзор проекта Этот репозиторий содержит комплексную оценку безопасности корпоративной ЛВС. Основное внимание в этом проекте было уделено идентификации, эксплуатации и устранению уязвимости Shellshock CVE-2014-6271 н...

Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System

Summary Multiple vulnerabilities affect IBM Cloud Pak System. These vulnerabilties have been addressed with IBM Cloud Pak System 2.3.5.1. Vulnerability Details CVEID:CVE-2025-15467 DESCRIPTION: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD...

USN-8898-1: Apache HTTP Server vulnerabilities

It was discovered that Apache HTTP Server's modrewrite module incorrectly handled memory when performing certain variable lookups. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-56154 Lucian Nitescu, Simon Kappel, and Gianluca...