CVE-2024-38475

CVE-2024-38475 POC Crédito : Todo el crédito a este chico: https://blog.orange.tw/ y https://x.com/orange8361; todo lo que hice fue crear un script POC basado en su investigación. Introducción : El escape incorrecto de la salida en modrewrite en Apache HTTP Server 2.4.59 y anteriores permite a un...

rt_redirectors

Rol de Ansible que permite desplegar rápidamente un redirector en un servidor existente con reglas de proxy modrewrite, Compatible con Debian y Ubuntu, probado en Digital ocean y Azure Consulta threat.tevora.com/automating-redirector-deployment-with-ansible para un blog que recorre los redirector...

linux-apache-fix-mod_rewrite-spaceInURL

SOLUCIÓN para linux Ubuntu Apache modrewrite espacio en URL Después de la última actualización de Apache, he tenido algunos problemas con los «espacios en URL» en modrewrite. 2023-04-25 - actualización apache2:amd64 2.4.38-3+deb10u9 2.4.38-3+deb10u10 Las URL que contienen «espacio» y han sido...

CVE-2006-3747

Archivos sobre mi publicación en bugtraq y el primer exploit funcional para CVE-2006-3747 desbordamiento off-by-one en modrewrite LDAP de Apache. http://www.securityfocus.com/archive/1/443870 Fecha de publicación del POC/Exploit: 2006-08-20 Autor: Jacobo Avariento Gimeno ID de CVE: CVE-2006-3747 ...

Sleight

Sleight Script de configuración del redirector C2 HTTPS para Empire. Uso: Sleight puede usarse de 3 maneras: 1 Configurar redirector HTTP: 1. Ejecute Sleight y proporciónele un perfil de comunicación de Empire. 2. Introduzca la dirección IP y el puerto de escucha de su C2 de Empire. 3. Diga «no» ...

cs2modrewrite

Automatically Generate Rulesets for Apache modrewrite or Nginx for Intelligent HTTP C2 Redirection This project converts a Cobalt Strike profile to a functional modrewrite .htaccess or Nginx config file to support HTTP reverse proxy redirection to a Cobalt Strike teamserver. The use of reverse...

CVE-2024-38475

CVE-2024-38475 explotación de CVE-2024-38475 debilidad de modrewrite con coincidencia de rutas del sistema de archivos Este repositorio contiene un script de Python para probar vulnerabilidades en servidores web, dirigido específicamente a servidores Apache. El script verifica posibles problemas...

Sonicwall - Pre-Authentication Arbitrary File Read

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. id: CVE-2019-10098 info: name: Apache HTTP server v2.4.0 to v2.4.39 - Open...

Linux Distros Unpatched Vulnerability : CVE-2026-56154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-24072-Analysis

CVE-2026-24072: Análisis de Escalada de Privilegios en modrewrite de Apache HTTP Server CVE-2026-24072 es una vulnerabilidad de escalada de privilegios local de severidad moderada en Apache HTTP Server 2.4.66 y versiones anteriores. Permite a autores locales de .htaccess leer archivos arbitrarios...

ALPINE-CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

DEBIAN-CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154 Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

EUVD-2026-90894

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154

A Use After Free vulnerability exists in the mod_rewrite module of the Apache HTTP Server (versions 2.4.0 through 2.4.68 ). The flaw is triggered when using lookahead functionality, specifically via the %{LA-U:HTTP:...} syntax. While the CVSS 3.1 score indicates a CRITICAL severity of 9.8 with po...