58 matches found
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
cve-2021-42013.get
Apache 2.4.50 - Path Traversal o Ejecución Remota de Código cve-2021-42013.py es un script de Python que ayuda a encontrar la vulnerabilidad de Path Traversal o Ejecución Remota de Código en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para practicar con CVE-2021-42013 Si...
CVE-2021-41773
CVE-2021-41773 CVE-2021-41773 POC con Docker Configuración Para personalizar el archivo httpd.conf, cambie la línea 251 en la sección de Require all denied a Require all granted. root@kitploit: AllowOverride none Require all granted Crear un Dockerfile en tu proyecto root@kitploit: FROM...
cve-2021-41773
cve-2021-41773 Run the Server $ docker build -t cve-2021-41773 . $ docker run --rm -d -p 80:80 cve-2021-41773 Exploitation curl --data "echo;id" 'http://localhost/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd' Root Cause Misconfiguration in the httpd.conf file combined with Path traversal = RCE...
CVE-2021-41773_42013
Configuración del laboratorio para CVE-2021-41773 y CVE-2021-42013 Configuración root@kitploit: $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTA: Los archivos httpd.co...
cve-2021-42013
Apache 2.4.50 - Path Traversal o Remote Code Execution CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Remote Code Execution en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para poner manos a la obra con CVE-2021-42013 Si...
EUVD-2018-13482
Malware in sbrugna...
CVE-2018-20944
cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test SEC-353...
CVE-2006-6472
The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors...
Exploit for Path Traversal in Apache Http_Server
PoC exploit for CVE-2021-41773 and CVE-2021-42013, two vulnerabi...
Arbitrary Code Injection
akeneo/pim-community-dev is vulnerable to arbitrary code injection. The vulnerability exists in Location parameter in httpd.conf because of not properly validate user inputs which allows an attacker to inject and execute malicious code into the system...
Exploit for Path Traversal in Apache Http_Server
It is an exploit module targeting Apache Log4j. The target produ...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-20...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 CVE-2021-41773 POC with Docker Configurati...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-20...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.49 - Path Traversal or Remote Code Execution cve-20...
Exploit for Path Traversal in Apache Http_Server
PoC exploit for CVE-2021-41773, a vulnerability in the Apache HT...
CVE-2018-20944
cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test SEC-353...
