CVE-2025-24813-Scanner

Escáner CVE-2025-24813 Un escáner de vulnerabilidades multihilo para detectar servidores Apache Tomcat vulnerables a CVE-2025-24813 subida arbitraria de archivos que conduce a ejecución remota de código, RCE. Descripción Este escáner comprueba servidores Apache Tomcat vulnerables a CVE-2025-24813...

CVE-2020-9484

Vulnerabilidad de deserialización de Apache Tomcat CVE-2020-9484 Configuración del objetivo vulnerable Clona este repositorio Ejecuta docker-compose up -d ¡Eso es todo! POC del exploit Ejecuta curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx Se...

CVE-2023-27350

CVE-2023-27350 POC para CVE-2023-27350 que afecta a PaperCut MF/NG Análisis técnico Un análisis técnico de causa raíz de la vulnerabilidad, indicadores de compromiso y exposición a Internet se puede encontrar en nuestro blog:...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Overview This code is a Python version POC for CVE-2023-32315. It performs a series of operations to verify whether the target website is affected by the CVE-2023-32315 vulnerability and attempts to execute certain operations on the affected...

CVE-2025-24813

CVE-2025-24813 Tomcat PoC PoC para un entorno CTF/laboratorio autorizado. Explota CVE-2025-24813 mediante la escritura PUT parcial de un archivo de sesión de Tomcat, y luego desencadena la deserialización con JSESSIONID. Requisitos previos Python 3 Módulo Python requests Java JDK java y javac El...

CVE-2020-9484

CVE-2020-9484 Tomcat Solo con fines educativos. Consulte la Referencia para los detalles. Ejecución $ git clone https://github.com/masahiro331/CVE-2020-9484.git $ cd CVE-2020-9484 $ docker build -t tomcat:groovy . $ CONTAINER=docker run -d -p 8080:8080 tomcat:groovy Verificación limpio $ docker...

CVE-2020-5421

Replicación de la vulnerabilidad de seguridad Spring CVE-2020-5421 Resumen de la vulnerabilidad CVE-2020-5421 puede eludir la protección contra ataques RFD mediante el parámetro de ruta jsessionid. La protección anterior contra RFD se agregó para abordar CVE-2015-5211. ¿Qué es RFD? La...

Session Fixation

Overview org.opencastproject:base is a free and open source solution for automated video capture and distribution at scale. Affected versions of this package are vulnerable to Session Fixation via URL-based jsessionid handling in the Spring Security HTTP configuration in...

CVE-2026-77614

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

EUVD-2026-81625

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2026-77614

Opencast , an open-source platform for managing educational audio and video content, is vulnerable to session fixation prior to versions 19.7 and 20.2. The default security configuration in etc/security/mh_default_org.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path paramet...

CVE-2026-77614 Opencast: Session fixation in login enables account takeover via crafted link

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2026-77614 Opencast: Session fixation in login enables account takeover via crafted link

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2026-77614: Session Fixation

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2023-32315-java7-

CVE-2023-32315 0x01 Die zurückgegebene JSESSIONID und csrftoken abrufen und ein Anforderungspaket zum Hinzufügen eines Benutzers erstellen JSESSIONID und csrftoken ersetzen img.png root@kitploit: cd CVE-2023-32315-Openfire-Bypass/scanall go mod tidy go run main.go -u http://openfire.com:9090 0x02...

BIT-KEYCLOAK-2024-7341 Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the turnOffChangeSessionIdOnLogin option is configured. This flaw allows an attacker who hijacks the current session before authenticati...

CVE-2026-43828

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

EUVD-2026-31734

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

CVE-2026-43828 Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

CVE-2026-43828

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...