CVE-2021-31166

CVE-2021-31166 Descripción - POC para CVE-2021-31166: Vulnerabilidad de ejecución remota de código en la pila de protocolos HTTP de Windows - Creado por antx el 2021-09-27. Detalle - ./trigger.gifPoc-Gif Severidad CVE - attackComplexity: LOW - attackVector: NETWORK - availabilityImpact: HIGH...

CVE-2021-31166

CVE-2021-31166 0x00.Descripción Esta es una prueba de concepto para CVE-2021-31166 "Vulnerabilidad de ejecución remota de código en la pila de protocolos HTTP", una desreferencia de use-after-free en http.sys corregida por Microsoft en mayo de 2021. Hasta donde sé, solo puede provocar el bloqueo...

EUVD-2026-73630

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

EUVD-2026-73031

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

Windows HTTP Print Provider Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

CVE-2026-69769: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

CVE-2026-69623: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

CVE-2026-62750

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

EUVD-2026-56372

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

Windows HTTP Protocol Stack Tampering Vulnerability

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

PT-2026-70510

Name of the Vulnerable Software and Affected Versions Windows HTTP Protocol Stack affected versions not specified Description A partial string comparison issue in the Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network, which can affect the...

CVE-2026-62750: Partial String Comparison

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

EUVD-2026-43802

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

FTP Fetch, Windows shellcode stage, Windows Reverse HTTP Stager (winhttp)

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Tunnel communication over HTTP Windows winhttp Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule includ...

CVE-2026-21240

Time-of-check time-of-use toctou race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

EUVD-2010-5298

Malware in sbrugna...

CVE-2025-53805

CVE-2025-53805 affects Windows Internet Information Services (IIS) via an out-of-bounds read in HTTP.sys, enabling an unauthenticated attacker to deny service over the network. The vulnerability is categorized as Denial-of-Service with network attack vector and high severity (CVSS 7.5, NETWORK/NO...

CVE-2010-10012

A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal...

CVE-2010-10012

Affected product: httpdasm 0.92 (Windows HTTP server). Issue: path traversal via a crafted GET containing URL-encoded backslashes and directory traversal patterns allows unauthenticated read of arbitrary host files, escaping the web root. Root cause: directory traversal flaw enabling access outsi...