109261 matches found
CVE-2026-34197-Lab
CVE-2026-34197 — Laboratório de RCE Jolokia do Apache ActiveMQ Classic Visão Geral Este repositório é um laboratório Docker local para estudar a CVE-2026-34197 , um problema de execução remota de código no Apache ActiveMQ Classic acessível através da API Jolokia JMX-HTTP. O laboratório compara du...
CVE-2026-23918-Elite-Auditor
☣️ CVE-2026-23918-Elite-Auditor ☣️ Ferramenta Profissional de Inteligência e Reconhecimento para a Vulnerabilidade de Double-Free no Apache HTTP/2. 📌 Visão Geral CVE-2026-23918 CVSS 8.8 é uma falha crítica de corrupção de memória no Apache HTTP Server 2.4.66. Este auditor foi projetado para...
CVE-2026-23918
CVE-2026-23918 Apache HTTP/2 स्कैनर यह रिपॉजिटरी एक सरल, चलाने में सुरक्षित Python स्कैनर है जो CVE-2026-23918, Apache HTTP/2 में एक गंभीर double-free भेद्यता, से ग्रस्त सर्वरों की पहचान करने के लिए डिज़ाइन किया गया है। 🔍 मुख्य विशेषताएं संस्करण पहचान : Apache 2.4.66 के उपयोग की पहचान करने के लिए...
CVE-2026-74848
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...
RHSA-2026:56868 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update
Bulletin has no description...
CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC
Achten Sie in Echtzeit auf den Double-Free-Fehler sudo tail -f /usr/local/apache2-vuln/logs/errorlog | grep -i "double free|exit signal" Führen Sie den PoC aus python3 /cve-2026-23918-poc.py localhost 9443...
CVE-2026-23918-test
CVE-2026-23918-test Dieses Repository enthält einen Proof of Concept PoC, der die Double-Free-Schwachstelle CVE-2026-23918 im Apache HTTP Server 2.4.66 modhttp2 demonstriert. Die Schwachstelle beruht auf einer Race Condition während der frühen Verarbeitung von RSTSTREAM-Frames. Ich habe mich auf...
-cve-2021-45232
Holen Sie sich bald den vollständigen Artikel auf https://Hellofhackers.com...
CVE-2021-41773
CVE-2021-41773 Apache2 2.4.49 - Exploit LFI e RCE Info root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...
CVE-1999-0678
CVE-1999-0678: Progetto di Rilevamento e Bonifica Autore: Pham Huu Minh Data: Dicembre 2025 Panoramica del Progetto Questo progetto dimostra l'intero ciclo di vita di una valutazione delle vulnerabilità, prendendo di mira specificamente la vulnerabilità legacy Directory Traversal CVE-1999-0678 su...
CVE-2026-23744-Remote-Code-Execution-POC
CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Führen Sie den Exploit aus root@kitploit: python3 exploit.py...
CVE-2021-41773-Analysis
CVE-2021-41773-Analyse Technische Analyse und Reproduktionslabor für die Path-Traversal- und RCE-Schwachstelle des Apache HTTP Servers 2.4.49...
EUVD-2026-66958
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...
CVE-2026-74848
Apache APISIX is vulnerable to an HTTP Request/Response Smuggling flaw in serverless-plugin routes , allowing an unauthenticated network attacker to cause other clients to receive attacker-chosen or cross-user responses. The issue affects versions 2.12.0 through 3.17.0 and is fixed in version 3.1...
CVE-2026-74848 Apache APISIX: Cross-user response poisoning in serverless plugins
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...
CVE-2025-62168
CVE-2025-62168 Divulgazione di informazioni nel proxy Squid nella gestione degli errori Scanner Rilevamento e PoC "A causa di una mancata oscuramento delle credenziali di autenticazione HTTP Squid è vulnerabile a un attacco di divulgazione di informazioni. Gravità: Questo problema consente a uno...
CVE-2026-21962
🔥 CVE-2026-21962 — Kit di Rilevamento Oracle HTTP Server Strumenti di rilevamento sicuri e non sfruttabili per identificare le istanze di Oracle HTTP Server e WebLogic Proxy Plug-in affette da CVE-2026-21962. 🧠 Panoramica della Vulnerabilità CVE: CVE-2026-21962 Gravità: Critica Vettore di Attacco...
cve-2021-44228-waf-tests
Semplice script bash per testare il tuo WAF o altri dispositivi contro le stringhe di attacco Log4Shell e vari bypass Trucchi di bypass da: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words Per eseguire: root@kitploit: ./cve-2021-44228.sh -t -c Oppure per usare i valori predefinit...
CVE-2026-33555
Bypass della Validazione del Body FIN Standalone in HAProxy H3/QUIC tramite HTTP Request Smuggling Post completo qui : https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Riepilogo Una vulnerabilità nell'implementazione HTTP/3 di HAProxy consente a un attaccante di...