CVE-2021-41773m

CVE-2021-41773 🐛 ثغرة اجتياز المسار وكشف الملفات في Apache HTTP Server 2.4.49 تم اكتشاف خلل في تغيير أجري على تطبيع المسار path normalization في Apache HTTP Server 2.4.49. يمكن للمهاجم استخدام هجوم اجتياز المسار لربط عناوين URL بملفات خارج الدلائل التي تم تكوينها بواسطة توجيهات شبيهة بـ Alias. إذ...

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: ثغرة اجتياز المسار Path Traversal من نوع Zero-Day في خادم Apache HTTP Server مستغلة في 5 أكتوبر، قام مشروع Apache HTTP Server بتصحيح CVE-2021-41773، وهي ثغرة اجتياز مسار وكشف ملفات في Apache HTTP Server، وهو خادم ويب مفتوح المصدر لنظامي التشغيل Unix و Windows ويُعد ...

cve-2021-41773-v-

Apache httpd RCE Уязвимость была обнаружена в изменении, внесённом в нормализацию путей в Apache HTTP Server 2.4.49. Злоумышленник может использовать атаку с обходом пути path traversal, чтобы сопоставлять URL с файлами за пределами каталогов, настроенных директивами, подобными Alias. Если файлы ...

ngxray

ngxray ماسح ضوئي ثابت لثغرات إعدادات nginx. يحلل الإعدادات باستخدام المحلل الخاص بـ nginx نفسه ويطابقها مع قواعد JSON تعريفية لاكتشاف CVEs معروفة في أنماط توجيهات محرك إعادة الكتابة/السكريبت. بداية سريعة root@kitploit: cd ngxray git submodule update --init make python3 scan.py /etc/nginx/nginx.co...

CVE-2026-42945

CVE-2026-42945: NGINX Rift ثغرة تجاوز سعة المخزن المؤقت في الكومة نظرة عامة CVE-2026-42945 هي ثغرة خطيرة من نوع تجاوز سعة المخزن المؤقت في الكومة Heap Buffer Overflow في خادم NGINX، وتُعرف باسم "NGINX Rift". توجد هذه الثغرة في منطق معالجة توجيهي rewrite وset في NGINX. عند توفر شروط تكوين محددة،...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Vulnerabilità di path traversal e divulgazione di file in Apache HTTP Server 2.4.49 È stato trovato un difetto in una modifica apportata alla normalizzazione dei percorsi in Apache HTTP Server 2.4.49. Un attaccante potrebbe utilizzare un attacco di path traversal per mappare gli...

CVE-2026-63179

Winter CMS (a Laravel-based PHP content management system) versions up to and including 1.2.12 allow authenticated backend users to disclose arbitrary files readable by the PHP process. The root cause is that the LESS parser (via the wikimedia/less.php integration in Winter Storm) was instantiate...

CVE-2026-78675

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78675

GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, enabling a local file content disclosure attack. An attacker who can place a malicious .gitmodules file in a repository can craft [include] directives pointing to sensitive local files. When repo.submodules is acces...

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78675

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

Magento-APSB22-48-Security-Patches

Offizielle Magento-Patches wurden veröffentlicht:Magento Docs Diese Patches adressieren die gleichen Sicherheitsprobleme wie dieses Repository. Allerdings haben wir einige Fehlerbehebungen für ältere Magento-Versionen hinzugefügt. Sicherheits-Patches für APSB22-48 Dieses Repository enthält Magent...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

CVE-2026-72603 wg-easy wg-easy - OS Command Injection

An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to the WireGuard configuration file witho...

CVE-2026-69118

CVE-2026-69118 affects Cachet up to version 2.4.1. The vulnerability is a server-side template injection in incident template rendering that allows authenticated users to execute arbitrary PHP code, enabling remote code execution as the web server process. Attackers can craft malicious incident t...

CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

Information Disclosure

undici is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper parsing of whitespace around qualified Cache-Control directives, causing authenticated responses to be incorrectly stored in shared caches and potentially served to unauthorized users...