CVE-2025-24813-POC

JSP Web Shell Uploader Ein einfaches Python-Tool zum Hochladen einer grundlegenden JSP-Web-Shell auf ein oder mehrere Ziele über HTTP-PUT-Anfragen. ⚠️ Nur für Bildungszwecke und autorisierte Penetrationstests. Apache Tomcat ist anfällig für ein Path Equivalence / Path Traversal-Problem aufgrund...

CVE-2025-24813

🚨 CVE-2025-24813 – Exploit RCE JSP PUT di Apache Tomcat Questo repository contiene una prova di concetto PoC completa per CVE-2025-24813 , una vulnerabilità di esecuzione remota di codice RCE in Apache Tomcat che utilizza il metodo HTTP PUT per distribuire una web shell JSP dannosa. 🔥 Questo...

CVE-2024-58298

Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the 'fileName' parameter to upload a web shell and execute...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

JSP Web Shell Uploader A simple Python tool for uploading a basi...

Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho's ManageEngine ADSelfService Plus self-service password management and single sign-on SSO solution. The spying...