📦 Modsecurity

CVE-2024-1019 is a WAF bypass vulnerability in ModSecurity v3 that allows attackers to hide malicious payloads in URL paths by using percent-encoded characters. This bypasses security rules that inspe...

CVE-2023-38285 is a denial-of-service vulnerability in Trustwave ModSecurity 3.x caused by inefficient algorithmic complexity in four transformation functions. Attackers can exploit this by sending sp...

This vulnerability in Trustwave ModSecurity allows attackers to cause a denial of service by triggering a segmentation fault in the Transaction class, leading to worker crashes and service unresponsiv...

CVE-2021-42717 is a denial-of-service vulnerability in ModSecurity's JSON parser where excessively nested JSON objects cause excessive CPU consumption and process blocking. This affects ModSecurity 2....