Linux Distros Unpatched Vulnerability : CVE-2026-42356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and...

Linux Distros Unpatched Vulnerability : CVE-2026-57941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free vulnerability in Apache HTTP Server's modhttp2 via shared session-bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through...

Linux Distros Unpatched Vulnerability : CVE-2026-48005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote...

Linux Distros Unpatched Vulnerability : CVE-2026-56449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0...

Linux Distros Unpatched Vulnerability : CVE-2026-93546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...

Linux Distros Unpatched Vulnerability : CVE-2026-73637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause...

Linux Distros Unpatched Vulnerability : CVE-2026-79768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directiv...

Linux Distros Unpatched Vulnerability : CVE-2026-59797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Privilege Management vulnerability in Apache HTTP Server's modssl via SSLRequire and file- related expressions. This issue affects Apache HTTP Server:...

Detections-CVE-2026-23918

TRASLADÁNDOSE A: https://github.com/insomnisec/publiccvedetections PARA UNA MEJOR GESTIÓN A LARGO PLAZO DE LAS PUBLICACIONES DE DETECCIÓN ESTE REPOSITORIO SERÁ ELIMINADO EN JUNIO DE 2026 POR FAVOR, UTILICE EL OTRO REPOSITORIO EN ADELANTE CVE-2026-23918 "Apache HTTP/2 Double-Free" — Paquete de...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Proyecto de investigación educativa. Todas las pruebas se realizaron en un laboratorio Docker aislado. No lo utilices contra ningún sistema que no sea de tu propiedad. Resumen de la vulnerabilidad Campo| Detalle ---|--- ID CVE|...

Apache-CVE-2026-23918-fix

Apache HTTP Server: http2: Double Free and possible RCE on early reset CVE-2026-23918. Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issu...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ Professional Intelligence & Reconnaissance Tool for Apache HTTP/2 Double-Free Vulnerability. 📌 Overview CVE-2026-23918 CVSS 8.8 is a critical memory corruption flaw in Apache HTTP Server 2.4.66. This auditor is designed to safely fingerprint targets and assess...

CVE-2026-23918-test

CVE-2026-23918-test This repository contains a Proof of Concept PoC demonstrating the Double Free vulnerability CVE-2026-23918 in Apache HTTP Server 2.4.66 modhttp2. The vulnerability stems from a race condition during early RSTSTREAM frame processing. I focused on the timing window where the...

CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC

Watch for the double-free in real-time sudo tail -f /usr/local/apache2-vuln/logs/errorlog | grep -i "double free|exit signal" Run the PoC python3 /cve-2026-23918-poc.py localhost 9443...

CVE-2021-41773

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo docker run -d -t -p 80:80 --name /bin/bash $ sudo docker exec -it ./bin/apachectl -k restart To access docker container for custom config file $ docker exec -it /bin/bash file config in /usr/local/apache2/conf/httpd.conf after config run comma...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server 検出ツールキット CVE-2026-21962 の影響を受ける Oracle HTTP Server および WebLogic Proxy Plug-in インスタンスを識別するための、安全で悪用を伴わない検出ツールです。 🧠 脆弱性の概要 CVE: CVE-2026-21962 深刻度: Critical 攻撃ベクトル: Network 認証要件: 不要 この脆弱性により、リモートの認証されていない攻撃者が機密性と完全性を侵害し、システム全体の完全な侵害につながる可能性があります。 🎯 影響を受けるバージョン...

CVE-2026-24072-Analysis

CVE-2026-24072: Apache HTTP Server modrewrite Privilege Escalation Analysis CVE-2026-24072 is a moderate-severity local privilege escalation vulnerability in Apache HTTP Server 2.4.66 and earlier. It allows local .htaccess authors to read arbitrary files on the filesystem with the privileges of t...

CVE-2021-41773-exercise

CVE-2021-41773-exercise Apache HTTP Server 2.4.49 のパス正規化に対する変更に欠陥が見つかりました。攻撃者はパストラバーサル攻撃を使用して、Alias 系ディレクティブで設定されたディレクトリの外部にあるファイルに URL をマッピングできる可能性があります。これらのディレクトリの外部にあるファイルが通常のデフォルト設定「require all denied」によって保護されていない場合、これらのリクエストは成功する可能性があります。また、これらのエイリアス化されたパスに対して CGI...

CVE-2026-36958

CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...