CVE-2026-85511

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

CVE-2026-85511

A parameter injection flaw was identified in Red Hat EAP's Elytron security subsystem. Specifically, an EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection allows parameter substitution due to missing URL encoding . The vulnerability is rated MEDIUM...

CVE-2026-85511 Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

EUVD-2026-82946

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

CVE-2026-85511

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

CVE-2023-32315-EXPLOIT

CVE-2023-32315 - Bypass de Autenticación en Openfire Este repositorio destaca un problema de seguridad grave que afecta a varias versiones de Openfire. Openfire, un servidor de colaboración en tiempo real multiplataforma que utiliza el protocolo XMPP desarrollado por la comunidad Ignite Realtime,...

linux-apache-fix-mod_rewrite-spaceInURL

SOLUCIÓN para linux Ubuntu Apache modrewrite espacio en URL Después de la última actualización de Apache, he tenido algunos problemas con los «espacios en URL» en modrewrite. 2023-04-25 - actualización apache2:amd64 2.4.38-3+deb10u9 2.4.38-3+deb10u10 Las URL que contienen «espacio» y han sido...

cve-2021-42013-httpd

Dockerización de una Vulnerabilidad: cve-2021-42013 Este proyecto tiene como objetivo dockerizar una vulnerabilidad específica utilizando Docker. El objetivo es crear un entorno aislado en el cual la vulnerabilidad pueda ser explotada y probada de manera segura. Aplicación vulnerable Apache HTTP...

POC-CVE-2021-41773

POC-CVE-2021-41773 El 5 de octubre de 2021 se publicó un CVE que detalla un ataque de path traversal en Apache HTTP Server v2.4.49. Se le asignó el número CVE-2021-41773 y se publicó con la siguiente descripción: Se encontró una falla en un cambio realizado en la normalización de rutas en Apache...

ghauri

Like Ghauri, consider supporting the developer...

cve-2021-41773

cve-2021-41773 Vulnerabilidad de Path Traversal CVE-2021-41773 en Apache 2.4.49. RCE POC PoC Payload curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh Síguenos Vulnmachines...

CVE-2022-22978

CVE-2022-22978 Spring Security Pasar Spring Security 成功 http://localhost:9090/login%0a Pasar Spring Security con SayMyName 失敗 http://localhost:9090/name%0d Saltar Spring Security con RBAC personalizado 失敗 http://localhost:9090/admin/admin%0d Saltar Spring Security con RBAC de anotaciones 失敗...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 Un escáner automático para Apache 2.4.49 root@kitploit: • ejecutar: go run main.go O go build main.go && ./main • puedes personalizar tu payload • los hosts vulnerables se guardan root@kitploit: Crea tu laboratorio: 1. Descargar imagen: sudo docker pull...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 es una vulnerabilidad grave en la función de interfaz web del software Cisco IOS XE que permite a atacantes remotos no autenticados crear cuentas con nivel de privilegio 15 en sistemas afectados, lo que les otorga control total del dispositivo. Esta vulnerabilida...

CVE-2020-13933

Campo de tiro CVE-2020-13933 Vulnerabilidad de omisión de autenticación en shiro 1.6.0 PoC http://127.0.0.1:8080/res/%3bpoc Entorno del campo de tiro Descripción del código ShiroConfig.java: Configuración de permisos: cuando se solicita el recurso /res/, redirige 302 a la página de inicio de sesi...

apache-cve-2021-41773-lab

Laboratorio de Path Traversal en Apache 2.4.49 — CVE-2021-41773 Clonar root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Uso Iniciar el servidor vulnerable: root@kitploit: ./apachelab.sh elige la opción 1 Explo...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...