CVE-2025-24813

🚨 CVE-2025-24813 – Apache Tomcat PUT JSP RCE 漏洞利用 此仓库包含针对 CVE-2025-24813 的完整概念验证 PoC 漏洞利用代码，该漏洞是 Apache Tomcat 中通过 HTTP PUT 方法部署恶意 JSP Web Shell 的远程代码执行 RCE 漏洞。 🔥 此漏洞利用示例展示了攻击者如何通过文件上传和有效载荷执行在未妥善保护的 Tomcat 实例中实现 RCE 。 📁 项目结构 root@kitploit: CVE-2025-24813/ ├── docker/ │ ├── Dockerfile │ └── web.xm...

CVE-2025-24813-POC

JSP Web Shell Uploader Ein einfaches Python-Tool zum Hochladen einer grundlegenden JSP-Web-Shell auf ein oder mehrere Ziele über HTTP-PUT-Anfragen. ⚠️ Nur für Bildungszwecke und autorisierte Penetrationstests. Apache Tomcat ist anfällig für ein Path Equivalence / Path Traversal-Problem aufgrund...

CVE-2024-58298

Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the 'fileName' parameter to upload a web shell and execute...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

JSP Web Shell Uploader A simple Python tool for uploading a basi...

Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho's ManageEngine ADSelfService Plus self-service password management and single sign-on SSO solution. The spying...