ROOT-APP-MAVEN-CVE-2025-48989 CVE-2025-48989 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2025-48989 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-43512 CVE-2026-43512 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-43512 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-53506 CVE-2025-53506 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2025-53506 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41293 CVE-2026-41293 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-41293 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

java-vulnerable

Demo consumer for CVE-2016-0714 Tomcat session persistence RCE + CVE-2013-1814 Apache Rave UserApi info disclosure plus four filter-padding Java OSS vulns. context.xml enables PersistentManager → Tomcat chain HOT; applicationContext-security.xml gates /api/rpc/users/ to ROLEADMIN → Rave chain...

ROOT-APP-MAVEN-CVE-2026-43514 CVE-2026-43514 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-43514 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-29129 CVE-2026-29129 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-29129 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-24734 CVE-2026-24734 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-24734 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-32990 CVE-2026-32990 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-32990 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34500 CVE-2026-34500 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-34500 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-25854 CVE-2026-25854 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-25854 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34486 CVE-2026-34486 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-34486 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

CVE-2020-1938

Declaración：所有网络安全工具的使用必须遵守国家法律法规、行业规范及目标系统的相关规定，不得用于任何非法或侵犯他人合法权益的用途。‌ 使用者应认识到，任何工具均无法保证绝对安全，不当使用可能导致法律风险、技术反制或数据污染。使用者需自行承担因违反本声明及相关规定而产生的全部责任。 Requisito：python3 Ejecución： python CVE-2020-1938.py your-ip -p 8009 -f WEB-INF/web.xml...

tomcat-cve-2026-34486

此存储库没有 README。...

vuln4japi

vuln4japi A vulnerable Java based REST API for demonstrating CVE-2021-44228 log4shell. Motivation Log4Shell took the internet by storm in early December 2021. A Zero Day vulnerability in the Apache Log4j logging library, capable of Remote Code Execution RCE that had organizations across the globe...

CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability Docker-based reproduction environment for CVE-2025-55752, a path traversal vulnerability in Apache Tomcat 10.1.44. Overview CVE-2025-55752 is a path traversal vulnerability in Apache Tomcat's RewriteValve caused by incorrect processing...

cve-2026-29145

CVE-2026-29145 — 即使禁用软失败，OCSP 检查有时仍会软失败 发现者： gregk4sec https://github.com/gregk4sec/cve 发现日期： 2026-02-26 受影响厂商： Apache 受影响产品： Tomcat 严重性： 9.1 严重 CWE： CWE-287 身份验证不当 状态： 审核中 / 已修复 / 私有 / 公开 ✅ 摘要 当禁用软失败时，CLIENTCERT 身份验证在某些场景下未按预期使 OCSP 检查失败。 技术分析 参见：analysis.md 复现步骤 1. 环境搭建 2. 触发条件 3. 预期行为与实际行为 4...

cve-2026-25854

CVE-2026-25854 — Redirección abierta ocasional Descubridor: gregk4sec https://github.com/gregk4sec/cve Fecha de descubrimiento: 2026-01-30 Vendor afectado: Apache Producto afectado: Tomcat 11.0.x / 10.1.x / 9.x Severidad: 6.1 Media CWE: CWE-601 Redirección de URL a sitio no confiable 'Open...

CVE-2021-31805

CVE-2021-31805 PoC for CVE-2021-31805 Apache Struts2 This is the application used in the CVE-2021-31805 explanation article. Setup root@kitploit: $ docker-compose build $ docker-compose up -d Verification Access http://localhost:8080/struts2-showcase-2.5.29/index.html and confirm that the Welcome...

cve-2026-43512-poc

CVE-2026-43512 — Bypass de autenticación DIGEST de Apache Tomcat Resultado del análisis de explotabilidad: la causa raíz está confirmada. La explotación de extremo a extremo no es reproducible contra un despliegue estándar de UserDatabaseRealm. Consulta Análisis para más detalles. Tabla de...