CVE-2024-50379-PoC

更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X 脚本使用 批量检测： python poc.py -f url.txt 单个检测： python poc.py -u your-ip...

CVE-2024-50379

手动利用麻烦，搓一个exp。。 食用： shell.jsp 是shell文件，ggsl.jsp是保存到目标服务器上的名称/路径 ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp 免责声明 本工具仅面向合法授权 的企业安全建设行为，如您需要测试本工具的可用性，请自行搭建靶机环境。 在使用本工具进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。请勿对非授权目标进行扫描。 如您在使用本工具的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。...

CVE-2024-50379-exp

CVE-2024-50379-exp -t 条件竞争时间 -u 域名 -f 写入木马 测试发现第一次条件竞争时有很大几率会写入失败需要重新再进行一次条件竞争才会写入木马，所以脚本第一次会进行固定6秒条件竞争检测是否写入，没有会再进行用户自定义或者默认的10秒检测，生成的木马为随机md5.jsp python .\CVE-2024-50379.py -u http://192.168.31.33:8888/ -f '123456' -t 10 image...

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT 仅供学习交流使用，请勿用于非法用途 RCE through a race condition in Apache Tomcat reference: https://github.com/iSee857/CVE-2024-50379-PoC Demo Usage go run main.go -u http://localhost:8080/ Todo 漏洞利用成功的检测机制...

CVE-2024-50379-nuclei

CVE-2024-50379 测试最新的 Apache Tomcat CVE-2024-50379 漏洞...

CVE-2024-50379

CVE-2024-50379 Explotación de CVE-2024-50379 CVE-2024-50379.py y upload.txt están en el mismo directorio El contenido de upload es un webshell Aquí el contenido de upload genera un archivo 2.jsp Mediante 2.jsp se puede crear un nuevo 4.jsp del Behinder original...

CVE-2024-50379

Apache Tomcat CVE-2024-50379（TOCTOU 远程代码执行） 漏洞描述 此存储库提供了针对 Apache Tomcat 中 CVE-2024-50379 的概念验证（PoC）利用程序，该漏洞是一个时间检查-时间使用（TOCTOU）竞态条件 ，可导致远程代码执行（RCE） 。 受影响的版本 Apache Tomcat 11.0.0-M1 至 11.0.0-M26 Apache Tomcat 10.1.0-M1 至 10.1.34 Apache Tomcat 9.0.0.M1 至 9.0.98 注意 ：如果 readonly 初始化参数设置为 false （默认值为...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 是一个影响 Apache Tomcat 的严重安全漏洞，允许攻击者利用错误配置或安全弱点执行远程代码（RCE）。一旦被利用，该漏洞可能导致服务器被接管、数据泄露或权限提升。 本仓库的目标是详细分析该漏洞、研究其利用方式，并提出修复措施以保护系统。 注意：所有内容仅供研究和教育目的。请勿用于非法用途。嘿嘿 即将推出的内容 -CVE-2024-50379 技术分析 -利用方式与影响 -概念验证（PoC）模拟 -如何保护系统免受此漏洞侵害...

Photon OS 5.0: Apache PHSA-2025-5.0-91-0445

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0445. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RockyLinux 9 : tomcat (RLSA-2025:11335)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11335 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

RockyLinux 10 : tomcat9 (RLSA-2025:11332)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11332 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

Security Bulletin: IBM Guardium Data Protection is affected by multiple Tomcat vulnerabilities (CVE-2025-24813, CVE-2024-50379)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-24813 DESCRIPTION: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files...

RLSA-2025:11333 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

RHEL 8 : tomcat (RHSA-2025:11382)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11382 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

ALSA-2025:11335 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

RHEL 9 : tomcat (RHSA-2025:11335)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11335 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

RHEL 9 : tomcat (RHSA-2025:11334)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11334 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

BIT-TOMCAT-2024-56337 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.1, from 10.1.0 through 10.1.33, from 9.0.0 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0...