sickrageWTF

Credenziali GitHub in chiaro di Sickrage CVE-2018-9160 1. Informazioni Titolo dell'exploit: Credenziali in chiaro di SickRage nella risposta HTTP Data: 2018-04-01 Autore dell'exploit: Sven Fassbender Contatto: https://twitter.com/mezdanak Homepage del fornitore: https://sickrage.github.io Link de...

CVE-2019-10092

CVE-2019-10092: Cross-Site Scripting limitato tramite pagina "Proxy Error" in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, è stato segnalato un problema di cross-site scripting limitato che interessava la pagina di errore di modproxy. Un aggressore potrebbe causare la deformazione del...

CVE-2026-63379

A flaw was found in Libevent, an event notification library. An unauthenticated remote attacker can exploit a vulnerability where chunked HTTP Hypertext Transfer Protocol trailers are incorrectly merged into request headers. This allows the attacker to place security-sensitive fields in trailers,...

golang security, bug fix, and enhancement update

An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

CVE-2026-73051

A flaw was found in actix-http. This vulnerability allows unauthenticated remote attackers to perform HTTP request smuggling. By sending specially crafted HTTP/1.1 requests that include both Content-Length and Transfer-Encoding: chunked headers, an attacker can desynchronize backend requests...

PNGboomer-CVE-2026-77622

PNGboomer — CVE-2026-77622 Exploit de negação de serviço para o listener HTTPS do Sliver C2. Força bruta no nonce de codificação PNG por sessão e entrega uma bomba de descompressão que esgota a memória do servidor. Publicado como GHSA-663m-7x7m-g4fw. Resumo O canal C2 HTTPS do Sliver encapsula...

Apache-CVE-2026-23918-fix

Apache HTTP Server: http2: Doppeltes Freigeben Double Free und mögliche RCE bei frühem Reset CVE-2026-23918. Schwachstelle mit doppeltem Freigeben Double Free und möglicher RCE im Apache HTTP Server mit dem HTTP/2-Protokoll. Dieses Problem betrifft Apache HTTP Server: 2.4.66. Benutzern wird...

CVE-2026-34197-Lab

CVE-2026-34197 — Laboratório de RCE Jolokia do Apache ActiveMQ Classic Visão Geral Este repositório é um laboratório Docker local para estudar a CVE-2026-34197 , um problema de execução remota de código no Apache ActiveMQ Classic acessível através da API Jolokia JMX-HTTP. O laboratório compara du...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ Ferramenta Profissional de Inteligência e Reconhecimento para a Vulnerabilidade de Double-Free no Apache HTTP/2. 📌 Visão Geral CVE-2026-23918 CVSS 8.8 é uma falha crítica de corrupção de memória no Apache HTTP Server 2.4.66. Este auditor foi projetado para...

CVE-2026-23918

CVE-2026-23918 Apache HTTP/2 स्कैनर यह रिपॉजिटरी एक सरल, चलाने में सुरक्षित Python स्कैनर है जो CVE-2026-23918, Apache HTTP/2 में एक गंभीर double-free भेद्यता, से ग्रस्त सर्वरों की पहचान करने के लिए डिज़ाइन किया गया है। 🔍 मुख्य विशेषताएं संस्करण पहचान : Apache 2.4.66 के उपयोग की पहचान करने के लिए...

CVE-2026-74848

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...

CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC

Achten Sie in Echtzeit auf den Double-Free-Fehler sudo tail -f /usr/local/apache2-vuln/logs/errorlog | grep -i "double free|exit signal" Führen Sie den PoC aus python3 /cve-2026-23918-poc.py localhost 9443...

CVE-2026-23918-test

CVE-2026-23918-test Dieses Repository enthält einen Proof of Concept PoC, der die Double-Free-Schwachstelle CVE-2026-23918 im Apache HTTP Server 2.4.66 modhttp2 demonstriert. Die Schwachstelle beruht auf einer Race Condition während der frühen Verarbeitung von RSTSTREAM-Frames. Ich habe mich auf...

-cve-2021-45232

Holen Sie sich bald den vollständigen Artikel auf https://Hellofhackers.com...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - Exploit LFI e RCE Info root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...

CVE-1999-0678

CVE-1999-0678: Progetto di Rilevamento e Bonifica Autore: Pham Huu Minh Data: Dicembre 2025 Panoramica del Progetto Questo progetto dimostra l'intero ciclo di vita di una valutazione delle vulnerabilità, prendendo di mira specificamente la vulnerabilità legacy Directory Traversal CVE-1999-0678 su...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Führen Sie den Exploit aus root@kitploit: python3 exploit.py...

CVE-2021-41773-Analysis

CVE-2021-41773-Analyse Technische Analyse und Reproduktionslabor für die Path-Traversal- und RCE-Schwachstelle des Apache HTTP Servers 2.4.49...

EUVD-2026-66958

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...

CVE-2026-74848 Apache APISIX: Cross-user response poisoning in serverless plugins

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...