CVE-2024-50379

CVE-2024-50379 CVE-2024-50379-Exploit CVE-2024-50379.py und upload.txt müssen sich im selben Verzeichnis befinden. Der Inhalt von upload ist eine Webshell. Der Inhalt von upload erzeugt hier eine Datei namens 2.jsp. Über 2.jsp kann eine neue Original-4.jsp-Datei von Behinder erstellt werden...

CVE-2024-50379-exp

CVE-2024-50379-exp -t tempo della race condition -u dominio -f scrivere il trojan Durante i test si è riscontrato che alla prima race condition la scrittura fallisce con alta probabilità e occorre eseguire nuovamente una race condition per scrivere il trojan. Per questo lo script esegue prima una...

CVE-2024-50379

手动利用麻烦，搓一个exp。。 Utilizzo: shell.jsp è il file shell, ggsl.jsp è il nome/percorso salvato sul server di destinazione ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp Dichiarazione di esonero di responsabilità Questo strumento è destinato esclusivamente ad attività di sicurezz...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 هي ثغرة أمنية خطيرة تؤثر على Apache Tomcat، وتسمح للمهاجمين باستغلال الأخطاء في الإعدادات أو نقاط الضعف لتنفيذ التعليمات البرمجية عن بُعد RCE. عند استغلالها، يمكن أن تؤدي هذه الثغرة إلى السيطرة على الخادم، أو تسريب البيانات، أو تصعيد الامتيازات. الهدف من هذا المستودع...

CVE-2024-50379-PoC

Weitere PoCs unter https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Verwendung des Skripts Batch-Prüfung: python poc.py -f url.txt Einzelprüfung: python poc.py -u your-ip...

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT للاستخدام التعليمي فقط، يُرجى عدم استخدامه لأغراض غير قانونية RCE من خلال حالة سباق في Apache Tomcat المرجع: https://github.com/iSee857/CVE-2024-50379-PoC Demo Usage root@kitploit: go run main.go -u http://localhost:8080/ Todo آلية الكشف عن نجاح استغلال الثغرة...

CVE-2024-50379-nuclei

CVE-2024-50379 Testare l'ultima vulnerabilità Apache Tomcat CVE-2024-50379...

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU Esecuzione Remota di Codice...

RockyLinux 10 : tomcat9 (RLSA-2025:11332)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11332 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

RockyLinux 9 : tomcat (RLSA-2025:11335)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11335 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

Security Bulletin: IBM Guardium Data Protection is affected by multiple Tomcat vulnerabilities (CVE-2025-24813, CVE-2024-50379)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-24813 DESCRIPTION: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files...

RLSA-2025:11333 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

RHEL 8 : tomcat (RHSA-2025:11382)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11382 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

RHEL 9 : tomcat (RHSA-2025:11334)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11334 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

ALSA-2025:11335 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

RHEL 9 : tomcat (RHSA-2025:11335)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11335 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

BIT-TOMCAT-2024-56337 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.1, from 10.1.0 through 10.1.33, from 9.0.0 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0...

TencentOS Server 3: tomcat (TSSA-2025:0304)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0304 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...