CVE-2025-23048-POC

CVE-2025-23048: Apache modssl TLS 1.3 Session Resumption Client Certificate Bypass Apache HTTP Server versions 2.4.35 – 2.4.62 are vulnerable to a client certificate authentication bypass when TLS 1.3 session resumption is used across virtual hosts with different SSLCACertificateFile directives. ...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: httpd: httpd-2.4.71-0.1.hum1 aarch64, s390x, x8664 httpd-core-2.4.71-0.1.hum1 aarch64, s390x, x8664 httpd-devel-2.4.71-0.1.hum1 aarch64, s390x, x8664 httpd-filesystem-2.4.71-0.1.hum1 noarch...

CVE-2002-0082

Fix : https://www.exploit-db.com/exploits/764 : Apache modssl 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow 1 Credit : https://blog.hypn.za.net/2017/08/27/compiling-exploit-764-c-in-2017/ Dont forget to: apt-get install libssl-dev Compile: gcc -o 764 764.c -lcrypto...

mangy-beast

Mangy Beast CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 AKA POODLE for Red Hat hosts running Apache and modssl or modnss and Windows Server 2008 and 2012 server processes only We're not going to rehash the minute details of CVE-2014-3566, otherwise known as POODLE. If...

Binary-Exploitation-and-Kernel-Escalation

Binary-Exploitation-and-Kernel-Escalation Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of modssl CVE-2002-0082. Privilege escalation was subsequently achieved by exploiting a race condition in...

SUSE SLES12: apache2 / apache2-devel / apache2-doc / apache2-example-pages / etc (SUSE-SU-2026:5099-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5099-1 advisory. - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and...

SUSE SLED15: apache2 / apache2-devel / apache2-event / apache2-manual / etc (SUSE-SU-2026:5077-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5077-1 advisory. - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be...

SUSE SLES15: apache2 / apache2-devel / apache2-doc / apache2-prefork / etc (SUSE-SU-2026:5076-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5076-1 advisory. - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and...

SUSE SLES15: apache2 / apache2-devel / apache2-manual / apache2-prefork / etc (SUSE-SU-2026:5075-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5075-1 advisory. - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and...

Security update for apache2

This update for apache2 fixes the following issues: CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to create...

SUSE-SU-2026:5099-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

Security update for apache2

This update for apache2 fixes the following issues: CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to create...

SUSE-SU-2026:5077-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

Security update for apache2

This update for apache2 fixes the following issues: CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to create...

SUSE-SU-2026:5076-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

SUSE-SU-2026:5075-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

Security update for apache2

This update for apache2 fixes the following issues: CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to create...

OESA-2026-4466 httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of...

OESA-2026-4465 httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.CVE-2026-56153 Use After Free vulnerability in Apache HTTP Server...

OESA-2026-4464 httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced...