CVE-2021-41773-Playground

CVE-2021-41773-Playground Some docker images to play with CVE-2021-41773 and CVE-2021-42013 run docker compose up -d to spin up all the containers. Servers will run on ports 8080, 8081, 8082, and 8083. 8080 contains an Apache 2.4.49 with CGI disabled. 8081 contains an Apache 2.4.49 with CGI...

CVE-2026-23918

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Affected: httpd 2.4.66 with modhttp2 and multi-threaded MPM event/worker. Fixed in: 2.4.67. Found and reported by Bartlomiej Dmitruk striga.ai and Stanislaw Strzalkowski isec.pl. Writeup:...

R7000_httpd_BOF_CVE-2020-15416

R7000httpdBOFCVE-2020-15416 I demenstrated you on how to set up a debugging environment using QEMU user mode for Netgear R7000 wifi router. Then I provide a walkthrough of an Exploit of Netgear WiFi Router httpd Buffer Overflow VulnerabilityCVE-2020-15416. It refers to...

CVE-2020-36109-POC

CVE-2020-36109-POC Feb 13 2021, Altin Thartori, github.com/tin-z Vulnerability details ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious dat...

POC-CVE-2021-41773

POC-CVE-2021-41773 this is simple script for the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. Usage: Check 1 ip Check from file...

apachedos

This tool uses CVE-2016-8740 to crash servers running Apache HTTPD 2.4.17 - 2.4.23 that support HTTP2. It crashes these servers by forcing them to allocate insanely large amounts of RAM, making the computer unuasable. It can be downloaded here you will need to run it from the command line Usage:...

CVE-2007-5036

CVE-2007-5036 Airsensor M520 - HTTPd Unauthenticated Remote Denial of Service / Buffer Overflow PoC Exploit-DB publication at https://www.exploit-db.com/exploits/4426/ Author Alex Hernandez aka @alt3kx...

CVE-2021-41773_42013

CVE-2021-41773 and CVE-2021-42013 Lab Setup Setup root@kitploit: $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTE: The httpd.conf files are configured to be vulnerable...

Cherokee HTTPD <=0.5 - Cross-Site Scripting

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - PoC de Apache httpd modhttp2 Este repositorio contiene una implementación de prueba de concepto escrita en Go para un escenario de corrupción de memoria antes de la autenticación que afecta a Apache httpd con modhttp2. El código en este repositorio demuestra un enfoque de...

CVE-2024-27316_poc

CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start root@kitploit: docker-compose up -d Connectivity check httpd v2.4.58 vulnerable root@kitploit: curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

CVE-2023-26067

CVE-2023-34362 POCs for credential dumping, reverse shells, and playing music by abusing a command injection, CVE-2023-26067, affecting Lexmark Printers. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278Nostromo httpd Command Execution ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013...

CVE-2018-12633-TPLink-Auth-Bypass

CVE-2018-12633-TPLink-Auth-Bypass A technical case study and exploitation analysis of the Authentication Bypass vulnerability in TP-Link TL-WR840N firmware CVE-2018-12633. Vulnerability Analysis: TP-Link TL-WR840N Authentication Bypass CVE-2018-12633 ⚠️ Disclaimer: This repository is for...

CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...

EUVD-2026-73942

A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...

CVE-2026-85384

A stack-based buffer overflow exists in the httpd component of the TP-Link RE210 AC750 , caused by improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger...

CVE-2019-16278

Exploits for CVE-2019-16278 and CVE-2019-16279 Nostromo httpd is prone to 2 cricital vulnerabilities for versions &1 This bug is due to an incomplete fix for CVE-2011-0751. We can bypass a check for which allows us to execute with arbitrary arguments...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Using root@kitploit: $ docker-compose up Using from Docker Hub root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master ·...