524 matches found
CVE-2024-38475
CVE-2024-38475 exploit per CVE-2024-38475 debolezza di modrewrite con corrispondenza del percorso del filesystem Questo repository contiene uno script Python per testare le vulnerabilità dei server web, in particolare quelli Apache. Lo script verifica potenziali problemi debolezza di modrewrite c...
linux-apache-fix-mod_rewrite-spaceInURL
FIX Linux Ubuntu Apache modrewrite Leerzeichen in URL Nach dem letzten Apache-Upgrade hatte ich einige Probleme mit "Leerzeichen in URL" in modrewrite. 2023-04-25 - upgrade apache2:amd64 2.4.38-3+deb10u9 2.4.38-3+deb10u10 Die URLs, die "Leerzeichen" enthalten und mit %20 ersetzt wurden, beginnen,...
apache-vulnerability-testing
Strumento di Test delle Vulnerabilità del Server HTTP Apache Questo repository fornisce una Proof of Concept PoC per testare varie vulnerabilità del server HTTP Apache, inclusi attacchi di confusione dei nomi file, SSRF, denial of service e altre relative a CVE recenti. Lo strumento invia richies...
rt_redirectors
Ruolo Ansible che consente di distribuire rapidamente un redirector su un server esistente con regole proxy modrewrite, Supporta Debian e Ubuntu, testato su DigitalOcean e Azure Vedi threat.tevora.com/automating-redirector-deployment-with-ansible per un blog che illustra i redirector, Ansible e...
CVE-2006-3747
File riguardanti la mia pubblicazione su bugtraq e il primo exploit funzionante per CVE-2006-3747 Apache modrewrite LDAP off-by-one buffer overflow. http://www.securityfocus.com/archive/1/443870 Data di rilascio pubblico del POC/Exploit: 2006-08-20 Autore: Jacobo Avariento Gimeno ID CVE:...
Sleight
Sleight Empire-HTTPS-C2-Redirector-Einrichtungsskript. Verwendung: Sleight kann auf 3 Arten verwendet werden: 1 HTTP-Redirector einrichten: 1. Führe Sleight aus und füttere es mit einem Empire-Kommunikationsprofil. 2. Gib die IP-Adresse und den Listening-Port deines Empire-C2 ein. 3. Beantworte d...
Sonicwall - Pre-Authentication Arbitrary File Read
Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...
Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. id: CVE-2019-10098 info: name: Apache HTTP server v2.4.0 to v2.4.39 - Open...
CVE-2024-38475
CVE-2024-38475 POC Авторство : Вся заслуга этому парню: https://blog.orange.tw/ и https://x.com/orange8361. Всё, что я сделал — написал POC-скрипт на основе его исследования. Введение : Неправильное экранирование вывода в modrewrite в Apache HTTP Server 2.4.59 и более ранних версиях позволяет...
cs2modrewrite
Genera automaticamente ruleset per Apache modrewrite o Nginx per il reindirizzamento intelligente di C2 HTTP Questo progetto converte un profilo Cobalt Strike in un file di configurazione modrewrite .htaccess o Nginx funzionante per supportare il reindirizzamento HTTP tramite reverse proxy verso ...
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
Summary The default .htaccess shipped with Grav and the reference webserver-configs/htaccess.txt contains security rules that block direct HTTP access to sensitive file types .yaml, .yml, .php, .json, .twig, etc. under user/ and system/vendor/ directories. However, these rules lack the NC No Case...
GLSA-202608-05 : Apache HTTPD: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202608-05 Apache HTTPD: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...
Important: httpd security, bug fix, and enhancement update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 Apache HTTP Server: modrewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation CVE-2026-24072 http...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Apache HTTP Server vulnerabilities (USN-8396-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8396-1 advisory. It was discovered that the Apache HTTP Server modrewrite module incorrectly handled certain privileges. A local...
SUSE-SU-2026:2104-1 Security update for apache2
This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in modproxyajp via ajpmsgcheckheader bsc1264163. -...
Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr
...
USN-8239-1 apache2 vulnerabilities
Bartlomiej Dmitruk and Stanislaw Strzalkowski discovered that Apache HTTP Server incorrectly handled certain memory operations when using the HTTP/2 protocol. A remote attacker could use this issue to cause Apache HTTP Server to crash, resulting in a denial of service, or possibly execute arbitra...
BIT-APACHE-2026-24072 Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr
An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
UBUNTU-CVE-2026-24072
An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
