Lucene search
+L

7682 matches found

Kitploit
Kitploit
added 2026/09/07 4:45 a.m.4 views

CVE-2017-12615

CVE-2017-12615 - Apache Tomcat Remote Code Execution RCE CVE-2017-12615 is a Remote Code Execution RCE vulnerability affecting Apache Tomcat 7.0.0 through 7.0.79 running on Microsoft Windows when HTTP PUT requests are enabled. The vulnerability exists because Tomcat incorrectly handles uploaded J...

8.1CVSS7.8AI score0.99607EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/07 4:32 a.m.6 views

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution RCE in Apache Tomcat. This vulnerability works on versions 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81. Tested only on 8.0.24. Vulnerability uses misconfigured PUT option on the...

8.1CVSS7.3AI score0.99988EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/07 4:16 a.m.3 views

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Remote Code Execution via Session Deserialization Unauthenticated partial PUT + path traversal + gadget-driven deserialization Description Apache Tomcat instances with the default servlet PUT enabled readonly=false allow writing files via HTTP PUT requests. By...

10CVSS8AI score0.99927EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/07 4:13 a.m.4 views

CVE-2020-9484

Apache Tomcat Deserialization Vulnerability CVE-2020-9484 Vulnerable target setup Clone this repository Run docker-compose up -d That's it ! Exploit POC Run curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx File named coldfx gets created in tmp...

7CVSS7AI score0.56636EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/07 3:48 a.m.4 views

CVE-2025-24813-apache-tomcat

CVE-2025-24813 Nuclei Template CVE-2025–24813 root@kitploit: nuclei -l list.txt -t CVE-2025–24813.yaml execute shell root@kitploit: http://target.com/updates.jsp?cmd=whoami...

10CVSS8.2AI score0.99927EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/07 3:05 a.m.4 views

CVE-2026-50229

⚡ CVE-2026-50229 — Apache Tomcat Examples XSS Exploit...

6.1CVSS6.4AI score0.04091EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 3:05 a.m.5 views

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...

9.3CVSS7.9AI score0.99652EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/07 2:51 a.m.2 views

CVE-2025-24813-Scanner

CVE-2025-24813 Scanner A multi-threaded vulnerability scanner to detect Apache Tomcat servers vulnerable to CVE-2025-24813 arbitrary file upload leading to RCE. Description This scanner checks for Apache Tomcat servers vulnerable to CVE-2025-24813 by: 1. Attempting to upload a serialized Java...

10CVSS8.1AI score0.99927EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/07 2:18 a.m.6 views

CVE-2020-9484

CVE-2020-9484 Apache Tomcat RCE CVE-2020-9484 Affected versions are: Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache Tomcat 8.x 8.5.55 Apache Tomcat 7.x 7.0.104...

7CVSS7AI score0.56636EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/07 1:55 a.m.6 views

CVE-2025-24813-PoC

CVE-2025-24813-PoC Apache Tomcat Remote Code Execution Vulnerability Batch Detection Script CVE-2025-24813 Disclaimer: The vulnerability and its reproduction steps described in this document are for cybersecurity research and educational purposes only. No one shall use the information provided in...

10CVSS8.2AI score0.99927EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/07 1:43 a.m.9 views

CVE-2020-1938

CVE-2020-1938 CVE-2020-1938 fixes errors in the PoC from https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat.git and has been verified to work on Apache Tomcat/8.0.43. Practice Steps 1. Create docker-compose.yml 2. docker compose up -d 3. python3 CVE-2020-1938.py -p 8009 ...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51References1
Kitploit
Kitploit
added 2026/09/07 1:21 a.m.8 views

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

10CVSS7.7AI score0.99927EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/07 12:48 a.m.2 views

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...

10CVSS8.2AI score0.99927EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/07 12:45 a.m.4 views

CVE-2019-0232-EXP

CVE-2019-0232-EXP Test environment: Win10 Home 1809, jre version 18.3 build 10.0.2+13, Tomcat version 9.0.13. Affected Tomcat Versions ★Apache Tomcat 9.0.0.M1 to 9.0.17 ★Apache Tomcat 8.5.0 to 8.5.39 ★Apache Tomcat 7.0.0 to 7.0.93 Configuration conf/web.xml root@kitploit: cgi...

9.3CVSS7.9AI score0.99652EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/07 12:29 a.m.5 views

CVE-2011-1571

CVE-2011-1571 Summary Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. CVE Detail :...

6.8CVSS5.9AI score0.0847EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/07 12:11 a.m.4 views

CVE-2022-22965-spring4shell

CVE-2022-22965-spring4shell CVE-2022-22965 Spring4Shell research & PoC for learning purposes Blog post A more detailed analysis and explanation of the vulnerability can be found on my blog post. Comments on initial research Based on the initial research I did on...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105References1
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.77 views

Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

9.3CVSS7.6AI score0.99652EPSS
SaveExploits11References5
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.132 views

Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. id: CVE-2026-34486 info: name: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote...

7.5CVSS7.5AI score0.98616EPSS
SaveExploits8References3
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.74 views

Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

5.3CVSS6.6AI score0.05848EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.169 views

Apache Tomcat 4.x-7.x - Cross-Site Scripting

Apache Tomcat 4.x through 7.x contains a cross-site scripting vulnerability which an attacker can use to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. id: CVE-2007-2449 info: name: Apache Tomcat 4.x-7.x - Cross-Site Scripting author:...

4.3CVSS6.1AI score0.77376EPSS
SaveExploits2References2
Rows per page
Query Builder