Collaborate Disseminate
As per the NVD description and the httpd official website, the vulnerability states:
"Serving WebSocket protocol upgrades over a HTTP/2 connection could
result in a Null Pointer dereference, leading to a crash of the server
process, … Continue reading how to exploit CVE-2024-36387 in httpd [closed]
I can sometimes see in the server logs records caused by series of “strange” HTTP requests such as
2024.10.16 16:21:00 /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5("hi"… Continue reading Ban user IP address by HTTP request?
I am testing a web application and I found a file upload vulnerability where I can upload php files to the server with the ability to know the path.
The issue is that when I go to the file path, the php file (which is my shell) gets downlo… Continue reading Executing a PHP file after file upload
Organizations are being warned of a newly discovered Apache OFBiz vulnerability as exploitation of another recent flaw is observed.
The post Apache OFBiz Users Warned of New and Exploited Vulnerabilities appeared first on SecurityWeek.
Continue reading Apache OFBiz Users Warned of New and Exploited Vulnerabilities
I would like to disable the use of TLSv1.3 in apache2 and only use TLSv1.2
I tried a few changes in the ssl.conf file, like:
SSLProtocol -all +TLSv1.2
SSLProtocol all -TLSv1.3
SSLProtocol TLSv1.2
SSLProtocol all -SSLv3 -TLSv1.2 -TLSv1.3
I’m stuck! I looked online and nothing works. What I would like to do is start my python program from shell which connects to browser localhost 127.0.0.1:8080 from code and use burp to try to find vulnerabilities, but it doesn’t work!
My p… Continue reading Python application from linux shell using burp doesn’t work [closed]
I tried to find a way to limit requests per minute (or other time) using mod security rule in apache, but didn’t get success from anywhere.
I think it needs more expertise to write such complex rules in mod security.
Our need is to setup r… Continue reading How to set requests rate limit using Mod Security Rule?
I have setup installed mod security module for apache in ubuntu 22.04, using.
sudo apt-get install libapache2-mod-security2
sudo a2enmod security2
sudo systemctl restart apache2
This installs security module version 2.9.5 with core rule s… Continue reading How to enable ModSecurity to actually block/deny malicious requests? [migrated]
Android, the popular mobile phone OS, is essentially just Linux with a nice user interface layer covering it all up. In theory, it should be able to do anything a …read more Continue reading Webserver Runs on Android Phone
I have access to companies internal files through SSRF and Path traversal both but want to leverage it further to website takeover. Thus I can increase the impact and get more bounty then what they will pay now.
I have access to files like… Continue reading I have access to companies internal files through SSRF and Path traversal both but want to leverage it further to website takeover