Lucene search
+L

8589 matches found

Kitploit
Kitploit
•added 2026/09/29 6:46 a.m.•11 views

CNVD-2020-10487

Description The tool is intended for security research and internal audits only. It is forbidden to use it to launch illegal attacks. The user is responsible for any consequences. Apache Tomcat file inclusion vulnerability CVE-2020-1938 / CNVD-2020-1048 batch detection tool. This project is...

9.8CVSS7.8AI score0.9927EPSS
SaveExploits51References4
RedhatCVE
RedhatCVE
•added 2026/09/29 5:51 a.m.•6 views

CVE-2026-86247

A flaw was found in Apache Tomcat Native. A race condition within a thread allows client certificate verification requirements to be down-graded for certain configurations. This could enable an attacker to bypass stricter authentication requirements, potentially leading to unauthorized access or...

7.4CVSS5.7AI score0.00179EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/29 4:46 a.m.•14 views

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

10CVSS8.8AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/29 4:46 a.m.•7 views

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Remote Code Execution via Session Deserialization Unauthenticated partial PUT + path traversal + gadget-driven deserialization Description Apache Tomcat instances with the default servlet PUT enabled readonly=false allow writing files via HTTP PUT requests. By...

10CVSS8.2AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/29 4:05 a.m.•11 views

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...

9.3CVSS8.4AI score0.99923EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/29 4:04 a.m.•14 views

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability Overview CVE202452316 is an authentication bypass vulnerability identified in Apache Tomcat. This issue arises when Tomcat is configured with a custom Jakarta Authentication formerly JASPIC ServerAuthContext...

8AI score0.06246EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/29 3:50 a.m.•14 views

CVE-2012-4431

Welcome to Apache Tomcat! What Is It? The Apache Tomcat® software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are...

4.3CVSS8AI score0.09146EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/29 3:49 a.m.•15 views

CVE-2018-11759

CVE-2018-11759 Proof of concept Description The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported b...

7.5CVSS7.5AI score0.90647EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 3:41 a.m.•12 views

CVE-2017-12615

CVE-2017-12615 - Apache Tomcat Remote Code Execution RCE CVE-2017-12615 is a Remote Code Execution RCE vulnerability affecting Apache Tomcat 7.0.0 through 7.0.79 running on Microsoft Windows when HTTP PUT requests are enabled. The vulnerability exists because Tomcat incorrectly handles uploaded J...

8.1CVSS8.1AI score0.99641EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/29 3:36 a.m.•13 views

tomcatWarDeployer

tomcatWarDeployer Herramienta de prueba de penetración para implementación automática de WAR y aprovechamiento de Apache Tomcat. ¿Qué es? Esta es una herramienta de pruebas de penetración diseñada para aprovechar las credenciales de Apache Tomcat con el fin de generar e implementar automáticament...

5CVSS6.1AI score0.13165EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/29 3:25 a.m.•11 views

CVE-2025-55668

CVE-2025-55668 Apache Tomcat - Session fixation via rewrite valve...

7AI score0.0086EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 3:14 a.m.•10 views

CVE-2025-24813

CVE-2025-24813 - Apache Tomcat Path Equivalence Vulnerability Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../ sequences in paths. CVE ID: CVE-2025-24813 Severity: Critical Reference link: https://github.com/advisories/GHSA-83qj-6fr2-vhqg Po...

10CVSS8.5AI score0.99927EPSS
SaveExploits51References1
Kitploit
Kitploit
•added 2026/09/29 3:02 a.m.•8 views

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813 Apache Tomcat Vulnerability POC CVE-2025-24813...

10CVSS8.4AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/29 2:51 a.m.•10 views

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813- Apache Tomcat - Remote Code Execution via Session Deserialization CVE-2025-24813...

10CVSS8.4AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/29 2:22 a.m.•15 views

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

8.1CVSS7.6AI score0.99968EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/29 2:19 a.m.•11 views

CVE-2022-22965-spring4shell

CVE-2022-22965-spring4shell CVE-2022-22965 Spring4Shell research & PoC for learning purposes Blog post A more detailed analysis and explanation of the vulnerability can be found on my blog post. Comments on initial research Based on the initial research I did on...

9.8CVSS7.8AI score0.99638EPSS
SaveExploits105References1
Kitploit
Kitploit
•added 2026/09/29 2:15 a.m.•19 views

ApacheTomcatScanner

Un script en Python para escanear vulnerabilidades de servidores Apache Tomcat. Características Trabajadores multihilo para buscar servidores Apache Tomcat. Múltiples fuentes de objetivos aceptadas: Recuperar lista de equipos de un dominio de Windows mediante una consulta LDAP para usarlos como...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 2:13 a.m.•16 views

CVE-2026-34486

CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. Affected: 11.0.19+, 10.1.53+, 9.0.116+. Fixed in: 11.0.21, 10.1.54, 9.0.117. Found and reported by Bartlomiej Dmitruk striga.ai. Writeup:...

7.5CVSS8AI score0.06561EPSS
SaveExploits8
Nuclei
Nuclei
•added 2026/09/29 2:09 a.m.•81 views

Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

5.3CVSS6.7AI score0.05848EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/09/29 2:09 a.m.•93 views

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

6.1CVSS7.4AI score0.06714EPSS
SaveExploits0References4
Rows per page
Query Builder