pwn3z

Application-Check

bullshit

CVE-2018-13379-FortinetVPN

CVE-2019-11510-PulseVPN

CVE-2019-19781-Citrix

CVE-2020-14882-WebLogic

CVE-2021-41773-Apache-RCE

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.

Hostname-Info

Java-Exploits

pwn3z/Hostname-Info

pwn3z/Application-Check

pwn3z/CVE-2018-13379-FortinetVPN

pwn3z/CVE-2019-11510-PulseVPN

pwn3z/Java-Exploits

pwn3z/bullshit

pwn3z/CVE-2019-19781-Citrix

pwn3z/CVE-2020-14882-WebLogic

pwn3z/CVE-2021-41773-Apache-RCE

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.