CVE-2019-16278

CVE-2019-16278 CVE-2019-16278Nostromo httpd命令执行 ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013 . drwxr-xr-x 16 0 0 0...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - PoC de Apache httpd modhttp2 Este repositorio contiene una implementación de prueba de concepto escrita en Go para un escenario de corrupción de memoria antes de la autenticación que afecta a Apache httpd con modhttp2. El código en este repositorio demuestra un enfoque de...

CVE-2021-41773_CVE-2021-42013_Exploits

Explotando CVE-2021-41773 y CVE-2021-42013 Descripción general Este repositorio se centra en explotar dos vulnerabilidades en Apache HTTPD: CVE-2021-41773 y CVE-2021-42013. Estos CVE representan vulnerabilidades de path traversal que potencialmente pueden conducir a mapeo de archivos y ejecución...

CVE-2019-17147

CVE-2019-17147：TP-Link TL-WR841N 漏洞利用 概述 本仓库记录了对 CVE-2019-17147 的全面逆向分析与利用过程，该漏洞是 TP-Link TL-WR841N 路由器（MIPSEL 架构）中的一个严重远程代码执行（RCE）漏洞。漏洞位于 httpd Web 服务器守护进程中，由于不正确的输入验证，通过自定义的 cstrstrncpy 函数导致基于栈的缓冲区溢出 ，从而在无需认证的情况下实现任意代码执行。 漏洞编号| CVE-2019-17147 ---|--- CVSS v3.1| 8.8（高危） 攻击向量|...

R7000_httpd_BOF_CVE-2020-15416

R7000httpdBOFCVE-2020-15416 Te demuestro cómo configurar un entorno de depuración usando el modo usuario de QEMU para el router WiFi Netgear R7000. Luego proporciono un recorrido de un exploit de la vulnerabilidad de desbordamiento de búfer de httpd del router WiFi Netgear CVE-2020-15416. Se...

CVE-2025-41244

💻 Proceso Técnico Paso a Paso Compilar el Programa bash Compile the C code into an executable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Make it executable chmod +x /tmp/httpd Probar la Funcionalidad de Versión bash Test the -v flag should print version and exit /tmp/httpd -v Test the -V flag should...

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....

CVE-2021-26690---Apache-mod_session

对 CVE-2021-26690 的补丁差异分析 - Apache modsession 此漏洞是 Apache 的 modsession 模块中的空指针解引用。 它将导致 Apache httpd 的子进程拒绝服务。 通过使用重复循环，每个 Apache worker 都会崩溃，从而导致所有连接或已连接到该网站的客户端拒绝服务。 该漏洞最初由 @antonio-morales 发现。 有关完整过程，请参阅本仓库中的 PDF。 限制 如果服务器通过 modsessioncrypto 实现了 SessionCryptoPassphrase 选项，则 cookie 将被加密并进行 base6...

apachedos

Esta herramienta usa CVE-2016-8740 para bloquear servidores que ejecutan Apache HTTPD 2.4.17 - 2.4.23 con soporte HTTP2. Bloquea estos servidores forzándolos a asignar cantidades increíblemente grandes de RAM, haciendo que la computadora sea inutilizable. Se puede descargar aquí necesitarás...

CVE-2021-41773_42013

CVE-2021-41773 and CVE-2021-42013 Lab Setup Setup $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTE: The httpd.conf files are configured to be vulnerable to RCE by...

apache_audit_cve-2026-23918

cve-2026-23918 针对 CVE-2026-23918 （Apache HTTPD HTTP/2 双重释放 RCE）以及 2026 年 5 月 4 日 Apache 软件基金会安全公告中披露的其他四个相关 CVE 的防御性审计工具。 CVE| 严重性| 组件| 影响| 受影响版本 ---|---|---|---|--- CVE-2026-23918| 高危（CVSS 8.8）| HTTP/2| 双重释放 / RCE| 仅 2.4.66 CVE-2026-24072| 中危| modrewrite（apexpr）| 权限提升| ≤ 2.4.66 CVE-2026-28780| 低...

Apache httpd <=2.4.29 - Arbitrary File Upload

Apache httpd 2.4.0 to 2.4.29 is susceptible to arbitrary file upload vulnerabilities via the expression specified in , which could match '$' to a newline character in a malicious filename rather than matching only the end of the filename. This could be exploited in environments where uploads of...

CVE-2017-15715-httpd

CVE-2017-15715-httpd whs 第4期 容器任务 摘要 Apache HTTPD 是一个广泛使用的 HTTP 服务器，可以通过 modphp 执行 PHP 网页。 从 2.4.0 到 2.4.29 版本存在一个解析漏洞，当文件名以 .php 结尾时，会被识别为 1.php\x0APHP 文件，从而允许攻击者绕过特定的服务器安全策略。 参考资料 https://httpd.apache.org/security/vulnerabilities24.html...

CVE-2021-41773

CVE-2021-41773 仅 Apache httpd 2.4.49 仅供教育目的。 详情请参阅参考资料。 运行 $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80 cve-2021-41773 利用 This vulnerability affects the use of Alias. $ curl...

busybox: busybox: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients...

optionsbleed

optionsbleed Esto es un código de prueba de concepto para comprobar el bug Optionsbleed en Apache httpd CVE-2017-9798. Por favor, considera usar la herramienta Snallygaster en su lugar; incluye una comprobación para optionsbleed: snallygaster -t optionsbleed host uso optionsbleed -h -n N -a -u...

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

Linux Distros Unpatched Vulnerability : CVE-2026-88831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients. CVE-2026-88831 No...

cve-2021-41773

cve-2021-41773 Ejecutar el servidor $ docker build -t cve-2021-41773 . $ docker run --rm -d -p 80:80 cve-2021-41773 Explotación curl --data "echo;id" 'http://localhost/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd' Causa Error de configuración en el archivo httpd.conf combinado con Path traversal = RCE...