65 matches found
CVE-2021-41773
CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. root@kitploit: AllowOverride none Require all granted Create a Dockerfile in your project root@kitploit: FROM httpd:2.4.49...
cve-2021-42013
Apache 2.4.50 - Path Traversal o Ejecución Remota de Código CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Ejecución Remota de Código en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para que puedas experimentar con...
CVE-2021-41773_42013
Configuración del laboratorio para CVE-2021-41773 y CVE-2021-42013 Configuración $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTA: Los archivos httpd.conf están...
cve-2021-41773
cve-2021-41773 Ejecutar el servidor $ docker build -t cve-2021-41773 . $ docker run --rm -d -p 80:80 cve-2021-41773 Explotación curl --data "echo;id" 'http://localhost/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd' Causa Error de configuración en el archivo httpd.conf combinado con Path traversal = RCE...
cve-2021-42013
Apache 2.4.50 - Path Traversal o Remote Code Execution CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Remote Code Execution en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para poner manos a la obra con CVE-2021-42013 Si...
cve-2021-42013.get
Apache 2.4.50 - Path Traversal o Ejecución Remota de Código cve-2021-42013.py es un script de Python que ayuda a encontrar la vulnerabilidad de Path Traversal o Ejecución Remota de Código en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para practicar con CVE-2021-42013 Si...
EUVD-2018-13482
Malware in sbrugna...
CVE-2018-20944
cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test SEC-353...
CVE-2006-6472
The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors...
Exploit for Path Traversal in Apache Http_Server
PoC exploit for CVE-2021-41773 and CVE-2021-42013, two vulnerabi...
Arbitrary Code Injection
akeneo/pim-community-dev is vulnerable to arbitrary code injection. The vulnerability exists in Location parameter in httpd.conf because of not properly validate user inputs which allows an attacker to inject and execute malicious code into the system...
Exploit for Path Traversal in Apache Http_Server
It is an exploit module targeting Apache Log4j. The target produ...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-20...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 CVE-2021-41773 POC with Docker Configurati...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-20...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.49 - Path Traversal or Remote Code Execution cve-20...
Exploit for Path Traversal in Apache Http_Server
PoC exploit for CVE-2021-41773, a vulnerability in the Apache HT...
CVE-2018-20944
cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test SEC-353...