davscan

DAVScan DAVScan은 DAV가 활성화된 웹 서버에서 숨겨진 파일과 폴더를 발견하기 위해 설계된 빠르고 가벼운 WebDAV 스캐너입니다. 이 스캐너는 과도한 권한이 부여되었거나 잘못 구성된 WebDAV 서버, 또는 다양한 정보 유출이나 인증 우회 취약점에 취약한 서버를 활용하여 작동합니다. 스캐너는 대상 서버의 지문을 식별한 후, 루트 PROPFIND 요청 결과를 기반으로 서버를 스파이더링합니다. 참고 사항: 제 형편없는 코드를 실제로 살펴보신다면, davscan의 핵심 일부를 beautiful soupbs4로 변경한 ...

WebDavC2

WebDAVC2 ULTIMA/VERSIONE CORRENTE: 0.3 Autore: Arno0x0x - @Arno0x0x WebDavC2 è un PoC che utilizza il protocollo WebDAV con sole richieste PROPFIND per fungere da canale di comunicazione C2 tra un agente, in esecuzione sul sistema di destinazione, e un controller che funge da server C2 vero e...

CVE-2017-7269

CVE-2017-7269 - Overflow del buffer WebDAV di IIS 6.0 Un'implementazione in Rust del POC per CVE-2017-7269, che prende di mira il servizio WebDAV in Microsoft Internet Information Services IIS 6.0. Panoramica della vulnerabilità CVE-2017-7269 è una vulnerabilità critica di overflow del buffer...

cve-2017-7269

Microsoft Windows Server 2003 R2 में Internet Information Services IIS 6.0 के WebDAV सेवा में ScStoragePathFromUrl फ़ंक्शन में बफर ओवरफ़्लो दूरस्थ हमलावरों को PROPFIND अनुरोध में "If: http://" से शुरू होने वाले लंबे हेडर के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देता है, जैसा कि जुलाई या...

CVE-2017-7269

CVE-2017-7269 भेद्यता संख्या: CVE-2017-7269 खोजकर्ता: Zhiniang Peng और Chen Wu दक्षिण चीन प्रौद्योगिकी विश्वविद्यालय, सूचना सुरक्षा प्रयोगशाला, कंप्यूटर विज्ञान और इंजीनियरिंग स्कूल भेद्यता विवरण: IIS 6.0 में डिफ़ॉल्ट रूप से WebDAV सक्षम नहीं है, लेकिन यदि WebDAV समर्थन सक्षम किया जाता है, तो IIS...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

Security update for tomcat11

This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. CVE-2026-42498: WebSocket authentication header exposure bsc1265165...

USN-8417-1 tomcat9, tomcat10 vulnerabilities

It was discovered that Tomcat did not properly limit the size of WebDAV LOCK and PROPFIND request bodies. A remote attacker could use this issue to cause Tomcat to consume excessive memory, resulting in a denial of service. CVE-2026-41284 It was discovered that Tomcat incorrectly validated HTTP/2...

USN-8417-1: Tomcat vulnerabilities

It was discovered that Tomcat did not properly limit the size of WebDAV LOCK and PROPFIND request bodies. A remote attacker could use this issue to cause Tomcat to consume excessive memory, resulting in a denial of service. CVE-2026-41284 It was discovered that Tomcat incorrectly validated HTTP/2...

CVE-2026-45810 Nextcloud: Propfind requests for file comments allowed to load comments for other files

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticated users with access to any file comment, to read the content of all comments. It is recommended th...

CVE-2026-45810 Nextcloud: Propfind requests for file comments allowed to load comments for other files

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticated users with access to any file comment, to read the content of all comments. It is recommended th...

CVE-2026-45810 Nextcloud: Propfind requests for file comments allowed to load comments for other files

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticated users with access to any file comment, to read the content of all comments. It is recommended th...

tomcat6: Fix of CVE-2026-41284

CVE-2026-41284: tomcat6: WebDAV LOCK/PROPFIND unbounded request body DoS...

Propfind requests for file comments allowed to load comments for other files

None...

BIT-TOMCAT-2026-41284 Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117. Older, unsupported versions may also be affected. Users are recommended to upgrade to versio...

Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 Apache Tomcat 9.0.0.M1 to 9.0.117 Older, unsupported versions may also be affected Description: No limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to...

GHSA-GX5V-XP9W-J4CG Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 Apache Tomcat 9.0.0.M1 to 9.0.117 Older, unsupported versions may also be affected Description: No limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to...