Lucene search
+L

732 matches found

Kitploit
Kitploit
added 2026/09/13 8:52 a.m.9 views

CVE-2024-40725-CVE-2024-40898

🚨Alerta🚨Vulnerabilidad de Apache 🚨Alerta🚨Aviso de Seguridad: CVE-2024-40725 y CVE-2024-40898🚨Alerta🚨 CVE-2024-40725 Descripción: CVE-2024-40725 es una vulnerabilidad de alta severidad encontrada en Apache HTTP Server versiones 2.4.0 a 2.4.61. Esta vulnerabilidad afecta al módulo modproxy. Cuando ...

9.1CVSS6.6AI score0.04168EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 1:52 a.m.6 views

cve-2022-31813

CVE-2022-31813 Verificador de Vulnerabilidad Autor : Derek Odiorne GitHub : @dodiorne Versión : 1.2 Última actualización : 21 de mayo de 2025 Técnica MITRE ATT &CK: T1190 – Explotar aplicación pública 🧠 Descripción Esta herramienta es un escáner de vulnerabilidades de caja negra para detectar...

9.8CVSS7.8AI score0.03543EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 11:54 p.m.5 views

CVE-2023-25690

CVE-2023-25690 Descripción de CVE-2023-25690: Algunas configuraciones de modproxy en Apache HTTP Server desde la versión 2.4.0 hasta 2.4.55 permiten ataques de HTTP Request Smuggling técnica de ataque que interfiere en el proceso de manejo de las secuencias de solicitudes HTTP recibidas de uno o...

9.8CVSS7.2AI score0.84508EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 10:36 p.m.5 views

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 - Apache = 2.4.48 - Exploit Python SSRF Una ruta de uri-path de solicitud manipulada puede hacer que modproxy reenvíe la solicitud a un servidor de origen elegido por el usuario remoto. Este problema afecta a Apache HTTP Server 2.4.48 y versiones anteriores. CVSS v3.1: Puntuación...

9CVSS7.6AI score0.99999EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 12:52 a.m.6 views

CVE-2021-40438

CVE-2021-40438 Apache forward request CVE CVE-2021-40438: A crafted request uri-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. This CVE could be used to spoof the original IPs in DoS attacks...

9CVSS7.6AI score0.99999EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/09 2:41 a.m.4 views

CVE-2021-40438

CVE-2021-40438 Una uri-path de solicitud puede hacer que modproxy reenvíe la solicitud al servidor de origen elegido por el usuario remoto. Este problema afecta a Apache HTTP Server 2.4.48 y versiones anteriores. Un atacante puede explotar esta vulnerabilidad creando solicitudes con una uri-path,...

9CVSS7.5AI score0.99999EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/08 5:31 p.m.14 views

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Uso root@kitploit: $ docker-compose up Uso desde Docker Hub root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master ·...

6.1CVSS6.8AI score0.81466EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/08 4:54 p.m.8 views

CVE-2019-10092

CVE-2019-10092: Cross-Site Scripting limitado a través de la página "Proxy Error" en Apache HTTP Server En Apache HTTP Server 2.4.0-2.4.39, se informó de un problema limitado de cross-site scripting que afectaba a la página de error de modproxy. Un atacante podía provocar que el enlace de la pági...

6.1CVSS6.7AI score0.81466EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/07 3:29 p.m.6 views

CVE-2024-38473

Proof of Concept PoC for Encoding Problem in modproxy in Apache HTTP Server This repository contains Proof of Concept PoC scripts for demonstrating an encoding problem in the modproxy module of Apache HTTP Server versions 2.4.59 and earlier. This vulnerability allows request URLs with incorrect...

8.1CVSS6.9AI score0.25878EPSS
SaveExploits1
Circl
Circl
added 2026/09/01 5:00 p.m.9 views

CVE-2021-3275

creationtimestamp| type| source ---|---|--- 2026-09-01 17:00:56+00:00| seen| https://t.me/cissp/2735 2026-09-02 01:04:46+00:00| seen| https://t.me/cissp/2735 2026-09-11 14:00:06+00:00| published-proof-of-concept| https://t.me/cissp/2735 2026-09-12 00:00:41+00:00| published-proof-of-concept|...

6.1CVSS6.3AI score0.01788EPSS
SaveExploits3References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.13 views

Astra Linux – Vulnerability in Apache2

A properly crafted request URI-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier...

9CVSS7.5AI score0.99999EPSS
SaveExploits5References2
RedHat Linux
RedHat Linux
added 2026/08/19 1:34 p.m.29 views

httpd: SSRF in Apache HTTP Server with mod_proxy loaded

A Server-side request forgery SSRF vulnerability exists in Apache httpd when the server has modproxy loaded and is configured with modheaders to modify the Content-Type header in the HTTP request or response using a value supplied by the user. Under this configuration, this flaw allows an attacke...

7.5CVSS6.4AI score0.0081EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/19 1:28 p.m.6 views

httpd: SSRF in Apache HTTP Server with mod_proxy loaded

A Server-side request forgery SSRF vulnerability exists in Apache httpd when the server has modproxy loaded and is configured with modheaders to modify the Content-Type header in the HTTP request or response using a value supplied by the user. Under this configuration, this flaw allows an attacke...

7.5CVSS6.4AI score0.0081EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.13 views

GLSA-202608-05 : Apache HTTPD: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-05 Apache HTTPD: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits54References47
Nuclei
Nuclei
added 2026/06/16 7:13 a.m.102 views

Apache <= 2.4.48 Mod_Proxy - Server-Side Request Forgery

Apache 2.4.48 and below contain an issue where uri-path can cause modproxy to forward the request to an origin server chosen by the remote user. id: CVE-2021-40438 info: name: Apache = 2.4.48 ModProxy - Server-Side Request Forgery author: pdteam severity: critical description: Apache 2.4.48 and...

9CVSS7.5AI score0.99999EPSS
SaveExploits5References5
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.16 views

Azure Linux 3.0 Security Update: httpd (CVE-2024-38473)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38473 advisory. - Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect...

8.1CVSS5.5AI score0.25878EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.11 views

MiracleLinux 8 : httpd:2.4 (AXSA:2021-2483:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2483:01 advisory. httpd: modproxy: SSRF via a crafted request uri-path containing unix: CVE-2021-40438 httpd: modsession: Heap overflow via a crafted SessionHeader...

9.8CVSS8.5AI score0.99999EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:00 a.m.15 views

MiracleLinux 7 : httpd24-httpd-2.4.34-22.el7.1 (AXSA:2021-2460:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2460:01 advisory. httpd: modproxy: SSRF via a crafted request uri-path containing unix: CVE-2021-40438 Tenable has extracted the preceding description block directly from the...

9CVSS8.3AI score0.99999EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.13 views

MiracleLinux 3 : httpd-2.2.3-53.3.0.1.AXS3 (AXSA:2011-346:03)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-346:03 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2011-3368 The modproxy module in the...

5CVSS7.4AI score0.90734EPSS
SaveExploits12References2
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:00 a.m.13 views

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2025-2228)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacke...

9.1CVSS7.5AI score0.03914EPSS
SaveExploits1References6
Rows per page
Query Builder