Lucene search
+L

7682 matches found

Kitploit
Kitploit
added 2026/09/07 12:29 a.m.5 views

CVE-2011-1571

CVE-2011-1571 Summary Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. CVE Detail :...

6.8CVSS5.9AI score0.0847EPSS
SaveExploits5
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.73 views

Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

5.3CVSS6.6AI score0.05848EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.77 views

Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

9.3CVSS7.6AI score0.99652EPSS
SaveExploits11References5
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.131 views

Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. id: CVE-2026-34486 info: name: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote...

7.5CVSS7.5AI score0.98616EPSS
SaveExploits8References3
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.169 views

Apache Tomcat 4.x-7.x - Cross-Site Scripting

Apache Tomcat 4.x through 7.x contains a cross-site scripting vulnerability which an attacker can use to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. id: CVE-2007-2449 info: name: Apache Tomcat 4.x-7.x - Cross-Site Scripting author:...

4.3CVSS6.1AI score0.77376EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.82 views

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

6.1CVSS7.3AI score0.06562EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/06 11:24 p.m.37 views

Apache Tomcat - Cross-Site Scripting

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

6.1CVSS6.2AI score0.04091EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/06 11:23 p.m.6 views

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

8.1CVSS7.6AI score0.99988EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/06 11:16 p.m.5 views

CVE-2020-1938-Exploitation

CVE-2020-1938 Exploitation Apache Tomcat arbitrary JSP upload leading to RCE Description CVE-2020-1938 is a critical vulnerability which impacts Apache Tomcat from 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 ⚠️ This was exploited in a Hack The Box lab. 🔗 Reference: NIST NVD Entry...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/06 11:14 p.m.6 views

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

8.1CVSS7.6AI score0.99988EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/06 11:05 p.m.5 views

CVE-2025-24813-vulhub

CVE-2025-24813-vulhub POC script for vulhub environment of CVE-2025-24813 Because many friends are confused about how to exploit this vulnerability, I wrote this script to help everyone with the exploitation in vulhub. Details: vulhub/tomcat/CVE-2025-24813 There is no directly exploitable chain i...

10CVSS8AI score0.99927EPSS
SaveExploits49References1
Kitploit
Kitploit
added 2026/09/06 10:57 p.m.6 views

CVE-2020-1938

cve-2020-1938 1.read file: python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/06 10:28 p.m.4 views

CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

7CVSS6.9AI score0.56636EPSS
SaveExploits17References3
Kitploit
Kitploit
added 2026/09/06 10:10 p.m.11 views

CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability Overview CVE-2024-52317 is a vulnerability affecting Apache Tomcat's HTTP/2 implementation. The issue arises due to improper recycling of HTTP/2 request and response resources, potentially leading to data leakage...

6.5CVSS6.7AI score0.02097EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 9:43 p.m.7 views

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability Overview CVE202452316 is an authentication bypass vulnerability identified in Apache Tomcat. This issue arises when Tomcat is configured with a custom Jakarta Authentication formerly JASPIC ServerAuthContext...

9.8CVSS7.7AI score0.06246EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 9:43 p.m.4 views

cve-2017-12615

CVE-2017-12615 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-12615 Image author: https://github.com/Medicean/VulApps/tree/master/t/tomcat/1...

8.1CVSS7.7AI score0.99607EPSS
SaveExploits20References3
Kitploit
Kitploit
added 2026/09/06 9:35 p.m.6 views

CVE-2020-13935

Exploit for WebSocket Vulnerability in Apache Tomcat CVE-2020-13935 In the corresponding blog post the analysis and exploitation of the vulnerability is explained in detail. Usage Clone the repository, then build the tcdos binary. Run the program as follows to test whether a particular WebSocket...

7.5CVSS7.1AI score0.86608EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/06 8:58 p.m.5 views

CVE-Arsenal-Lab

TomcatScanner Advanced Detection and Exploitation Tool for CVE-2025-24813 TomcatScanner is a comprehensive security tool designed for detecting and exploiting the CVE-2025-24813 vulnerability in Apache Tomcat servers. This vulnerability involves a path equivalence issue in the 'file.Name' paramet...

10CVSS8.5AI score0.99927EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/06 8:54 p.m.3 views

CVE-2020-1938TomcatAjpScanner

CVE-2020-1938TomcatAjpScanner Batch scan for Tomcat AJP vulnerability Vulnerability Details On January 6, 2020, the National Information Security Vulnerability Sharing Platform CNVD included the Apache Tomcat file inclusion vulnerability CNVD-2020-10487, corresponding to CVE-2020-1938. Attackers...

9.8CVSS7.3AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/06 8:24 p.m.6 views

ApacheTomcatScanner

A python script to scan for Apache Tomcat server vulnerabilities. Features Multithreaded workers to search for Apache tomcat servers. Multiple target sources accepted: Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets...

5.9AI score
SaveExploits0
Rows per page
Query Builder