CLEANSTART-2026-TH04863 Apache HTTP server 2

Security vulnerability affects the apache2 package. Apache HTTP server 2...

CLEANSTART-2026-VO42453 In Apache HTTP Server 2

Security vulnerability affects the apache2 package. In Apache HTTP Server 2...

CLEANSTART-2026-RW21782 Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Security vulnerability affects the apache2 package. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data...

CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests

Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Ejecución Remota de Código VISIÓN GENERAL Apache RocketMQ es una de las plataformas de mensajería y streaming distribuidas más populares y ampliamente utilizadas. Recientemente se ha reportado una vulnerabilidad de ejecución de comandos en Apache RocketMQ que afect...

study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Informe de investigación sobre las vulnerabilidades S2-054, S2-055 de Struts2 y las vulnerabilidades CVE-2017-7525, CVE-2017-15095 de Jackson Publicamos un artículo resumido que resume los puntos clave y lo hace fácil de leer. Recomendado para quienes deseen conocer primero el panorama general o ...

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

CVE-2021-42013

Servicio vulnerable CVE-2021-42013 Instalación Varias opciones: 1. Contenedor Docker docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t...

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — también conocido como CVE-2021-44228 — es una vulnerabilidad crítica que permite la ejecución remota de código en sistemas que utilizan Log4j de la Apache Foundation, que es una biblioteca Java de código abierto ampliamente utilizada en productos de software...

PT-2026-108817

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The OIDC relying-party component allows the redirection of users to an attacker-controlled URL following successful...

PT-2026-108818

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The FIQL query parser contains a flaw in its operator search mechanism. When processing a long string that lacks an operator,...

PT-2026-108811

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The parser for multipart/MTOM attachment part headers fails to strictly enforce the attachment-max-header-size and...

PT-2026-108813

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description StaxUtils does not impose limits on the total number of elements or characters in an XML document by default. This allows a...

PT-2026-108812

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The Netty-based HTTP client transport cxf-rt-transports-http-netty-client fails to verify that the hostname in the server TLS...

PT-2026-108810

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description Improper verification of cryptographic signatures in the JAX-RS XML Security module allows for XML Signature wrapping. The...

PT-2026-108894

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

PT-2026-108893

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

PT-2026-108815

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider allows a...

PT-2026-108814

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description An issue exists in the OidcClientCodeRequestFilter where the max age authentication-freshness check is inoperative. This is...

PT-2026-108816

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The CompressionUtils.inflate function decompresses attacker-controlled DEFLATE data without an output-size cap, allowing a...