ghostcat-verification

Ghostcat 検証 CVE-2020-1938 概要 Ghostcat と呼ばれる新しいエクスプロイトが発見されました CVE-2020-1938。エクスプロイト自体の詳細と分析については、snyk と tenable の記事を参照してください。 私の場合、どの Tomcat サーバーが悪用可能で、もし可能ならそれがどのように現れるのかを検証したかったのです。そこで、この実験では Tomcat 7、8、9 を確認します。 前提条件 docker python git Tomcat 7 で CVE-2020-1938 を使用してファイルを読み取る TODO: Tomcat 7...

ghostcatch

ghostcatch Apache Tomcat の AJP コネクタを無効化して CVE-2020-1938 Ghostcat を修正する Python ツール！ 現在の対応バージョン: Python 2.7 必要条件: pip install progress 使用方法: python ghostCatch.py -help 使用法を表示するフラグ 例: python ghostCatch.py -help -path パスを指定するフラグ 例: python ghostCatch.py -path /myPath システム全体で server.xml ファイルを検索する場合:...

CVE-2020-1938

CVE-2020-1938 検出ルール CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath";...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 Apache Tomcat AJP Ghostcatの脆弱性（CVE-2020-1938）を悪用するための強力なPythonエクスプロイトツールで、ペネトレーションテストやセキュリティ研究のための高度な機能を備えています。 🔍 概要 Ghostcatの脆弱性（CVE-2020-1938）は、攻撃者が脆弱なApache TomcatサーバーにデプロイされたWebアプリケーションから、AJP（Apache JServ...

ghostcat

Ghostcat - CVE-2020-1938 Exploit AJPコネクタ（ポート8009）経由でTomcatのファイルを読み取ります 使用方法: python3 ghostcat.py ファイル """ スクリプトを保存 cat ghostcat.py 'PYEOF' AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA PYEOF 権限を付与して実行 chmod +x ghostcat.py tomcat-users.xmlを読み取る（Tomcat Managerの認証情報） python3 ghostcat.py ejemplo.com...

CVE-2026-76420

A vulnerability in the internal configuration of the Apache JServ Protocol AJP connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector...

CVE-2026-76420 Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability

A vulnerability in the internal configuration of the Apache JServ Protocol AJP connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector...

CVE-2026-76420

CVE-2026-76420 affects the internal configuration of the Apache JServ Protocol (AJP) connector in Cisco Secure FMC Software . The root cause is incorrect initialization of encryption parameters for the AJP connector at boot time. An unauthenticated, remote attacker can send crafted packets to the...

CVE-2026-76420 Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability

A vulnerability in the internal configuration of the Apache JServ Protocol AJP connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector...

EUVD-2026-80887

A vulnerability in the internal configuration of the Apache JServ Protocol AJP connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector...

CVE-2026-76420: Improper Authorization

A vulnerability in the internal configuration of the Apache JServ Protocol AJP connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector...

PT-2026-93868

Name of the Vulnerable Software and Affected Versions Cisco Secure FMC Software affected versions not specified Description An issue exists in the internal configuration of the Apache JServ Protocol AJP connector. This is caused by the incorrect initialization of encryption parameters for the AJP...

CVE-2019-20790

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:59+00:00| seen| https://t.me/hackingAttack/38673 2026-09-02 01:02:22+00:00| seen| https://t.me/hackingAttack/38673 2026-09-06 13:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38673 2026-09-07 01:00:14+00:00|...

EUVD-2022-1173

Malicious code in bioql PyPI...

EUVD-2022-4818

Malicious code in bioql PyPI...

EUVD-2022-4009

Malicious code in bioql PyPI...

EUVD-2022-4979

Malicious code in bioql PyPI...

K53254186: Apache Tomcat vulnerability CVE-2020-1938

Security Advisory Description When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they...

K73059510: Undertow vulnerabilities CVE-2019-10212 and CVE-2020-1745

Security Advisory Description CVE-2019-10212 A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files. CVE-2020-1745 A file inclusion vulnerability was found...

SUSE CVE-2009-0033

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...