CVE-2021-41773-RedTeam

CVE-2021-41773 — Apache HTTP Server 2.4.49 पाथ ट्रैवर्सल / RCE ITSOLERA साइबर सुरक्षा विभाग — रेड टीम टास्क 3 टीम: ऑफेंसिव टीम ज़ेटा दिनांक: 18 मार्च 2026 ⚠️ अस्वीकरण यह रिपॉज़िटरी केवल शैक्षिक उद्देश्यों के लिए है। सभी परीक्षण एक पृथक स्थानीय Docker लैब में किए गए। इसे लाइव, प्रोडक्शन या...

cve-2021-44790-lab

Laboratório CVE-2021-44790 Este repositório contém um pequeno laboratório local e ferramentas de prova de conceito para reproduzir a vulnerabilidade do Apache HTTP Server rastreada como CVE-2021-44790. Visão geral CVE-2021-44790 é uma vulnerabilidade no Apache HTTP Server 2.4.51/2.4.52 envolvendo...

CVE-2021-41773---Apache-Path-Traversal---RCE

CVE-2021-41773 — Traversal de Caminho & Execução Remota de Código Tarefa de Estágio: ITSOLERA PVT LTD — Segurança Ofensiva Estagiária: Areeba Zehra Jafri Líder de Equipe: Muhammad Ahsan Ayaz Data: 18 de Março de 2026 Visão Geral Pesquisa e exploração do CVE-2021-41773 — Vulnerabilidade de Travers...

CVE-2022-31813

Iniciar o laboratório docker compose up --build Acesso normal GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013

टोही और शोषण: Apache HTTP सर्वर भेद्यताएँ - CVE-2021-41773 और CVE-2021-42013 इस प्रोजेक्ट में, मैंने Apache HTTP सर्वर भेद्यताओं, विशेष रूप से CVE-2021-41773 और CVE-2021-42013 को लक्षित करने वाली एक विस्तृत पैठ परीक्षण प्रक्रिया का दस्तावेजीकरण किया, जिसमें Path Traversal और Remote Code Execution...

CVE-2021-41773m

CVE-2021-41773 🐛 पथ ट्रैवर्सल और फ़ाइल प्रकटीकरण भेद्यता Apache HTTP सर्वर 2.4.49 में Apache HTTP Server 2.4.49 में पथ सामान्यीकरण में किए गए एक बदलाव में एक दोष पाया गया। हमलावर पथ ट्रैवर्सल हमले का उपयोग करके URL को Alias-जैसी निर्देशों द्वारा कॉन्फ़िगर किए गए निर्देशिकाओं के बाहर फ़ाइलों पर मै...

cve-reproduction-lab

Laboratório de Reprodução de CVE Visão Geral Este projeto é um laboratório de pesquisa em cibersegurança projetado para demonstrar o impacto real de vulnerabilidades de software através de exploração controlada e simulação de patch defensivo. O laboratório foca na CVE-2021-41773, uma...

PoC-Apache-CVE-2021-41773-Infrastructure-LAB

Apache CVE-2021-41773 — Laboratório Docker PoC Aviso de Segurança Este repositório reproduz uma vulnerabilidade divulgada publicamente e corrigida em um ambiente de laboratório Docker controlado para fins educacionais e de pesquisa. O ambiente é intencionalmente vulnerável e deve ser implantado...

CS4277-CVE-Path-Traversal-Apache-HTTP-Server

CS4277-CVE-Path-Traversal-Apache-HTTP-Server Membros da Equipe: Emily Nguyen, Jonathan Kim, Joon Jang Seleção de Tópico do Projeto: Projeto 1: Recriar e Explorar uma CVE do Mundo Real: Path Traversal CVE-2021-41773 no Apache HTTP Server. Objetivo do Projeto: Esperamos reproduzir a CVE-2021-41773...

[SECURITY] Fedora 45 Update: httpd-2.4.68-7.fc45

The Apache HTTP Server is a powerful, efficient, and extensible web server...

Exploit for CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server Security Vulnerability...

httpd: httpd: Information disclosure via session cookie leakage during internal redirects

A flaw was found in Apache HTTP Server's modsessioncookie module. When internal redirects alter the SessionCookieRemove configuration, the server may fail to strip the session cookie as expected. This issue can lead to information disclosure by inadvertently forwarding sensitive user session toke...

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects

A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...

httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error

A flaw was found in the moddav module of the Apache HTTP Server. This vulnerability allows a Denial of Service DoS by crashing server child processes. An attacker with permission to create Web Distributed Authoring and Versioning WebDAV locks can trigger a memory calculation error during lock...

httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html

A flaw was found in the modproxyhtml module of Apache HTTP Server. An attacker who controls or manipulates HTTP response bodies processed by the proxy can trigger an out-of-bounds memory write. This issue can cause the server process to crash, resulting in a Denial of Service DoS...

httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc

A flaw was found in the modxml2enc module of the Apache HTTP Server. An untrusted backend server can cause a Denial of Service DoS by returning a crafted response with a character set whose conversion partially succeeds and then fails. Processing this response triggers an invalid memory access nu...

httpd: httpd: Authentication bypass via credential replay in mod_auth_digest

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence

A flaw was found in Apache HTTP Server's moduserdir module. When configured with an absolute path without wildcards for the UserDir directive, the server fails to properly resolve single-dot directory '/./' path equivalence. A remote attacker can exploit this issue by submitting a crafted HTTP...

httpd: httpd: Information disclosure via direct request to the WebDAV state directory

A flaw was found in the moddavfs module of the Apache HTTP Server. A remote attacker can exploit this vulnerability by sending an HTTP GET request directly to the internal WebDAV Web Distributed Authoring and Versioning state directory. This allows unauthorized access to internal state files,...

httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest

A flaw was found in the modauthdigest module of the Apache HTTP Server. When Digest authentication is configured with nonce-count checking enabled, missing authentication checks allow an unauthenticated remote attacker to submit forged HTTP Authorization headers. This flaw can lead to a Denial of...