26 matches found
cve-2021-41773
cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49. RCE POC PoC Payload curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh Follow us Vulnmachines YouTube Twitter...
POC-CVE-2021-41773
POC-CVE-2021-41773 On the 5th of October 2021, a CVE detailing a path traversal attack on Apache HTTP Server v2.4.49 was released. Assigned the number CVE-2021-41773, it was released with the following description: A flaw was found in a change made to path normalization in Apache HTTP Server...
CVE-2026-101986
An Improper Authentication vulnerability in the J-Web component of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass authentication. By sending a crafted HTTP request , an attacker can execute CGI content with elevated privileges . No specific exp...
CVE-2026-101986 Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request...
CVE-2026-108907
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function userok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...
EUVD-2026-97677
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function userok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...
CVE-2026-108907 Netcore NR268 CGI Execution user_ok improper authentication
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function userok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...
CVE-2026-108907
A critical improper authentication vulnerability exists in Netcore NR268 version 1.7.121109 within the CGI Execution component. Specifically, a manipulation of the user_ok function allows for remote unauthorized access. The exploit has been publicly disclosed and may be utilized by attackers. Whi...
CVE-2026-108907: Improper Authentication
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function userok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...
PT-2026-110653
Name of the Vulnerable Software and Affected Versions Netcore NR268 version 1.7.121109 Description Improper authentication exists in the CGI Execution component. A remote attacker can manipulate the user ok function to bypass authentication mechanisms. Recommendations At the moment, there is no...
Linux Distros Unpatched Vulnerability : CVE-2026-42356
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2026-1556)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IIS 1.0,Netscape Server 1.0/1.12,OReilly WebSite Professional 1.1 b BAT/.CMD Remote Command Execution
No description provided by source. IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source: http://www.securityfocus.com/bid/2023/info Some web servers that allow batch files to be executed via CGI are...
BB4 Big Brother Network Monitor 1.5 d2 bb-hist.sh HISTFILE Parameter File Existence Disclosure
No description provided by source. source : http://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway...
nginx+cgi to parse php is prone to a vulnerability-vulnerability warning-the black bar safety net
The title is a bit large, when we analyze carefully after, in fact, are generally configuration issues. If someone wants to attack the server, it will scan the machine where there is vulnerability can upload a malicious script file, the upload script is the first step, When a malicious php script...
CVE-2012-4443
Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...
PHP 5.3.x < 5.3.13 CGI Query String Code Execution
Binary data 6494.prm...
Microsoft Internet Information Server DoS
Request like http://www.example.com/vtibin/.dll/0 for virtual folders with CGI execution enabled causes server to crash and potentially leads to code execution...
Multiple vulnerabilities in Pico Server (pServ) v3.3
Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphal Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server ...
sh-httpd.txt
======================================== INetCop Security Advisory 2003-0x82-019 ======================================== Title: sh-httpd wildcard character' vulnerability 0x01. Description About: sh-httpd is a shell script-based Web server that supports GET and HEAD methods, and a CGI 1.1...