5983 matches found
CVE-2021-26690---Apache-mod_session
Patch diffing for CVE-2021-26690 - Apache modsession This vulnerability is a NULL pointer dereference within the modsession Apache's module. It will cause a denial of service for the child processes of Apache's httpd. By using a repetitive loop, each Apache workers will crash, leading to a denial...
CVE-2023-26067
CVE-2023-34362 POCs for credential dumping, reverse shells, and playing music by abusing a command injection, CVE-2023-26067, affecting Lexmark Printers. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...
XiongMai uc-httpd 1.0.0 - Buffer Overflow
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....
Cherokee HTTPD <=0.5 - Cross-Site Scripting
Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...
CVE-2019-16278
Exploit per CVE-2019-16278 e CVE-2019-16279 Nostromo httpd è soggetto a 2 vulnerabilità critiche per versioni &1 Questo bug è dovuto a una correzione incompleta per CVE-2011-0751. Possiamo aggirare un controllo per che ci permette di eseguire con argomenti arbitrari...
CVE-2021-41773
CVE-2021-41773 Playground === Questa è una piccola ricetta Docker per configurare un contenitore basato su Debian bookworm con un'istanza di Apache HTTPd 2.4.49 vulnerabile a CVE-2021-41773. CGI è stato esplicitamente abilitato in modo da poter essere utilizzato per testare/verificare il...
CVE-2019-16278
CVE-2019-16278 CVE-2019-16278 Nostromo httpd esecuzione comandi ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013...
CVE-2024-27316_poc
CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Server target Apache httpd Avvia root@kitploit: docker-compose up -d Verifica connettività httpd v2.4.58 vulnerabile root@kitploit: curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 versione...
CVE-2025-41244
💻 Processo Tecnico Passo-Passo Compila il Programma bash Compile the C code into an executable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Make it executable chmod +x /tmp/httpd Testa la Funzionalità della Versione bash Test the -v flag should print version and exit /tmp/httpd -v Test the -V flag...
Rejetto HTTP File Server - Template injection
This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...
Apache Tomcat JK Connect <=1.2.44 - Manager Access
Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...
Apache httpd <=2.4.29 - Arbitrary File Upload
Apache httpd 2.4.0 to 2.4.29 is susceptible to arbitrary file upload vulnerabilities via the expression specified in , which could match '$' to a newline character in a malicious filename rather than matching only the end of the filename. This could be exploited in environments where uploads of...
POC-CVE-2021-41773
POC CVE-2021-41773 N|Solid Poc per testare la vulnerabilità CVE-2021-41773 relativa al servizio Apache httpd 2.4.49. POC Apri il tuo terminale preferito ed esegui questi comandi. Primo tab: root@kitploit: wget https://raw.githubusercontent.com/TishcaTpx/POC-CVE-2021-41773/main/poc.py Secondo tab:...
optionsbleed
optionsbleed Dies ist ein Proof-of-Concept-Code, um den Optionsbleed-Bug in Apache httpd CVE-2017-9798 zu testen. Bitte ziehen Sie das Tool Snallygaster in Betracht, es enthält einen Check auf Optionsbleed: root@kitploit: snallygaster -t optionsbleed host Verwendung root@kitploit: optionsbleed -h...
CVE-2026-23918
CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Betroffen: httpd 2.4.66 mit modhttp2 und mehrthreadigem MPM event/worker. Behoben in: 2.4.67. Gefunden und gemeldet von Bartlomiej Dmitruk striga.ai und Stanislaw Strzalkowski isec.pl. Writeup:...
http2-bomb-detector
http2-bomb-detector Strumento di rilevamento non distruttivo della vulnerabilità HTTP/2 Bomb CVE-2026-49975 — per Nginx / Apache httpd Contesto della vulnerabilità CVE-2026-49975 è una vulnerabilità diffusa di denial of service remoto a livello di protocollo HTTP/2, scoperta dal ricercatore di...
CVE-2021-41773_CVE-2021-42013_Exploits
Sfruttare CVE-2021-41773 e CVE-2021-42013 Panoramica Questo repository si concentra sullo sfruttamento di due vulnerabilità in Apache HTTPD: CVE-2021-41773 e CVE-2021-42013. Queste CVE rappresentano vulnerabilità di path traversal che possono potenzialmente portare a mappatura di file ed esecuzio...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC Strumento di riproduzione della vulnerabilità di denial of service remota HTTP/2 Panoramica della vulnerabilità CVE-2026-49975 è una vulnerabilità di denial of service HTTP/2 che colpisce i principali server web. È stata scoperta all'inizio di giugno 2026 dalla...
CVE-2021-41773-Playground
CVE-2021-41773-Playground Alcune immagini docker per giocare con CVE-2021-41773 e CVE-2021-42013 Esegui docker compose up -d per avviare tutti i contenitori. I server saranno in esecuzione sulle porte 8080, 8081, 8082 e 8083. 8080 contiene un Apache 2.4.49 con CGI disabilitato. 8081 contiene un...