CVE-2025-10035

Escáner CVE-2025-10035 Resumen Este proyecto proporciona una herramienta para escanear sistemas potencialmente afectados por CVE-2025-10035 , una vulnerabilidad de deserialización en el Servlet de Licencia de Fortra's GoAnywhere MFT. La vulnerabilidad podría permitir a un atacante con una firma d...

SAP_EEM_CVE-2020-6207

PoC for CVE-2020-6207 Missing Authentication Check in SAP Solution Manager This script allows to check and exploit missing authentication checks in SAP EEM servlet tcsmdagentapplicationeem that lead to RCE on SAP SMDAgents connected to SAP Solution Manager Original finding: Pablo Artuso Yvan 'igg...

damn-vulnerable-log4j-app

Recursos de SnapAttack Log4j / CVE-2021-44228 / log4shell ¿Qué incluye? Damn Vulnerable Log4j App damn-vulnerable-log4j-app contiene un servlet Java vulnerable básico que registra el User Agent, los parámetros HTTP GET y POST con log4j. Está empaquetado como un archivo .war y puede desplegarse en...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilidad de Path Traversal en Zimbra 📋 Resumen CVE-2025-68645 es una vulnerabilidad de path traversal en Zimbra Collaboration Suite que permite a atacantes no autenticados leer archivos arbitrarios del sistema de archivos del servidor. Endpoint Vulnerable...

CVE-2019-0232

CVE-2019-0232 Exploit Ejecución remota de código RCE en el Servlet CGI – Apache Tomcat en Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat tiene una vulnerabilidad en el Servlet...

grails3-cve-2022-27772

grails3-cve-2022-27772 The Grails® framework 3.3 application provides custom implementation for TomcatEmbeddedServletContainerFactory which overrides createTempDirectory method implementation. The custom implementation is then used to create EmbeddedServletContainer bean from Application.groovy...

CVE-2026-94269

Apache APISIX versions 2.14.1 through 3.18.0 are vulnerable to a Use of Non-Canonical URL paths for authorization decisions vulnerability. In configurations where a permissive route overlaps a protected one, an attacker can use a crafted encoded path to bypass intended security policies. This mis...

CVE-2026-94269 Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatch

Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations where a permissive route overlaps a protected one, a crafted encoded path can reach an upstream endpoint that the matched route's policies were never meant to cover. A request that...

CVE-2025-4632_POC

Samsung MagicINFO 9 Server Exploit CVE-2025-4632 This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution RCE vulnerability in Samsung MagicINFO 9 Server versions prior to 21.1052. The vulnerability exists due to an improper limitation of a...

CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability

CVE-2025-68645 — Zimbra Classic UI LFI Defender Pack This repository is a defender-focused reference pack for CVE-2025-68645 , a Local File Inclusion LFI issue in Zimbra Collaboration ZCS 10.0.x and 10.1.x Classic Webmail UI caused by improper handling of user-controlled request parameters in the...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2025:1742733084)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1742733084 advisory. - Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to...

CentOS Linux 7 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (CENTOS7:CLSA-2025:1755272015)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1755272015 advisory. - Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2025:1754650455)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754650455 advisory. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through...

CentOS Linux 6 [TuxCare] Security Update: tomcat6 / tomcat6-admin-webapps / tomcat6-docs-webapp / etc (CENTOS6:CLSA-2025:1755513827)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1755513827 advisory. - Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to...

AlmaLinux 9.2 [TuxCare] Security Update: pki-servlet-4.0-api / pki-servlet-engine Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1775646020)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775646020 advisory. - Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly...

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT License Servlet Deserialization RCE Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A perfect-10 deserialization chain in Fortra GoAnywhere MFT: a forged license response signature lets an...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...

PT-2026-102721

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy normally matches the raw request path, while servlet backends such as Apache Tomcat strip semicolon matrix parameters from each path segment before resolving...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 vulnerabilidad crítica de ejecución remota de código RCE descubierta en Apache Tomcat afecta a los sistemas con HTTP PUT habilitado mediante el establecimiento del parámetro de inicialización "read-only" del servlet Default en "false". Las versiones de Tomcat...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. 0x00 Dork shodan title:"GoAnywhere" FOFA title="GoAnywhere" 0x01 Use Java Version java -version openjdk...