[VULN_VARIANT] 2026-07-04T20:59:44+00:00 Project cache dir: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce
[VULN_VARIANT] 2026-07-04T20:59:44+00:00 Repo path: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/repo
[VULN_VARIANT] 2026-07-04T20:59:44+00:00 Fetching origin...
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 Vulnerable commit resolved: 3309a6cac05335aa4371a0c3750b42fbe05d3cb4
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 Vulnerable binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-vuln/civetweb
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 Fixed binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-fixed/civetweb
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 === Vulnerable binary tests ===
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 vulnerable chunked: RCE observed
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 vulnerable webdav move: RCE observed
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 vulnerable shtm: RCE observed
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 === Fixed binary (NO_POPEN) tests ===
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 fixed chunked: no RCE observed
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 fixed webdav move: no RCE observed
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 fixed shtm: no RCE observed
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 Results:
[VULN_VARIANT] 2026-07-04T20:59:45+00:00   vulnerable chunked PUT .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T20:59:45+00:00   vulnerable WebDAV MOVE .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T20:59:45+00:00   vulnerable PUT .shtm RCE: 1
[VULN_VARIANT] 2026-07-04T20:59:45+00:00   fixed chunked PUT .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T20:59:45+00:00   fixed WebDAV MOVE .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T20:59:45+00:00   fixed PUT .shtm RCE: 0
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 Variant reproduced on vulnerable version: true
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 Variant reproduced on fixed version (bypass): false
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 Wrote runtime manifest: /data/pruva/runs/9abbeb7f-454b-47eb-b206-0b53a534d423/bundle/vuln_variant/runtime_manifest.json
[VULN_VARIANT] 2026-07-04T20:59:45+00:00 No bypass confirmed: variants only work on vulnerable version or none reproduced.
[VULN_VARIANT] 2026-07-04T20:59:47+00:00 Project cache dir: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce
[VULN_VARIANT] 2026-07-04T20:59:47+00:00 Repo path: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/repo
[VULN_VARIANT] 2026-07-04T20:59:47+00:00 Fetching origin...
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 Vulnerable commit resolved: 3309a6cac05335aa4371a0c3750b42fbe05d3cb4
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 Vulnerable binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-vuln/civetweb
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 Fixed binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-fixed/civetweb
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 === Vulnerable binary tests ===
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 vulnerable chunked: RCE observed
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 vulnerable webdav move: RCE observed
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 vulnerable shtm: RCE observed
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 === Fixed binary (NO_POPEN) tests ===
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 fixed chunked: no RCE observed
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 fixed webdav move: no RCE observed
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 fixed shtm: no RCE observed
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 Results:
[VULN_VARIANT] 2026-07-04T20:59:48+00:00   vulnerable chunked PUT .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T20:59:48+00:00   vulnerable WebDAV MOVE .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T20:59:48+00:00   vulnerable PUT .shtm RCE: 1
[VULN_VARIANT] 2026-07-04T20:59:48+00:00   fixed chunked PUT .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T20:59:48+00:00   fixed WebDAV MOVE .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T20:59:48+00:00   fixed PUT .shtm RCE: 0
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 Variant reproduced on vulnerable version: true
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 Variant reproduced on fixed version (bypass): false
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 Wrote runtime manifest: /data/pruva/runs/9abbeb7f-454b-47eb-b206-0b53a534d423/bundle/vuln_variant/runtime_manifest.json
[VULN_VARIANT] 2026-07-04T20:59:48+00:00 No bypass confirmed: variants only work on vulnerable version or none reproduced.
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Project cache dir: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Repo path: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/repo
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Fetching origin...
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Vulnerable commit resolved: 3309a6cac05335aa4371a0c3750b42fbe05d3cb4
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Vulnerable binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-vuln/civetweb
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Fixed binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-fixed/civetweb
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 === Vulnerable binary tests ===
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 vulnerable chunked: RCE observed
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 vulnerable webdav move: RCE observed
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 vulnerable shtm: RCE observed
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 === Fixed binary (NO_POPEN) tests ===
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 fixed chunked: no RCE observed
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 fixed webdav move: no RCE observed
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 fixed shtm: no RCE observed
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Results:
[VULN_VARIANT] 2026-07-04T21:13:07+00:00   vulnerable chunked PUT .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T21:13:07+00:00   vulnerable WebDAV MOVE .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T21:13:07+00:00   vulnerable PUT .shtm RCE: 1
[VULN_VARIANT] 2026-07-04T21:13:07+00:00   fixed chunked PUT .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T21:13:07+00:00   fixed WebDAV MOVE .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T21:13:07+00:00   fixed PUT .shtm RCE: 0
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Variant reproduced on vulnerable version: true
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Variant reproduced on fixed version (bypass): false
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 Wrote runtime manifest: /data/pruva/runs/9abbeb7f-454b-47eb-b206-0b53a534d423/bundle/vuln_variant/runtime_manifest.json
[VULN_VARIANT] 2026-07-04T21:13:07+00:00 No bypass confirmed: variants only work on vulnerable version or none reproduced.
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Project cache dir: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Repo path: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/repo
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Fetching origin...
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Vulnerable commit resolved: 3309a6cac05335aa4371a0c3750b42fbe05d3cb4
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Vulnerable binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-vuln/civetweb
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Fixed binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-fixed/civetweb
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 === Vulnerable binary tests ===
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 vulnerable chunked: RCE observed
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 vulnerable webdav move: RCE observed
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 vulnerable shtm: RCE observed
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 === Fixed binary (NO_POPEN) tests ===
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 fixed chunked: no RCE observed
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 fixed webdav move: no RCE observed
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 fixed shtm: no RCE observed
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Results:
[VULN_VARIANT] 2026-07-04T21:13:09+00:00   vulnerable chunked PUT .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T21:13:09+00:00   vulnerable WebDAV MOVE .shtml RCE: 1
[VULN_VARIANT] 2026-07-04T21:13:09+00:00   vulnerable PUT .shtm RCE: 1
[VULN_VARIANT] 2026-07-04T21:13:09+00:00   fixed chunked PUT .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T21:13:09+00:00   fixed WebDAV MOVE .shtml RCE: 0
[VULN_VARIANT] 2026-07-04T21:13:09+00:00   fixed PUT .shtm RCE: 0
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Variant reproduced on vulnerable version: true
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Variant reproduced on fixed version (bypass): false
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 Wrote runtime manifest: /data/pruva/runs/9abbeb7f-454b-47eb-b206-0b53a534d423/bundle/vuln_variant/runtime_manifest.json
[VULN_VARIANT] 2026-07-04T21:13:09+00:00 No bypass confirmed: variants only work on vulnerable version or none reproduced.