httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository contains a Markdown analysis report for CVE-2020-1938 Ghostcat and the image assets used in the report. Contents Report: docs/report/CVE-2020-1938-Analysis-Report.md Images: docs/images Report Scope The report is organized around:...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003824 advisory. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to th...

GhostCat-LFI-exp

GhostCat-LFI-exp CVE-2020-1938 EXP original: https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi Solo se modificó un lugar: ahora puede incluir ejecutar localmente cualquier archivo de cualquier proyecto...

ghostcat-verification

Ghostcat verification CVE-2020-1938 Summary A new exploit called Ghostcat has been found CVE-2020-1938, see the articles on snyk and tenable for details and analysis of the exploit itself. In my case, I wanted to verify which Tomcat servers are exploitable and if so how does it manifest itself. S...

F5-BIG-IP-SmuggleShell-CVE-2023-46747-Exploit

F5 BIG-IP CVE-2023-46747 – RCE sin autenticación + Shell inversa Versiones para Python3 y Nuclei – por raguraman RCE crítica sin autenticación CVSS 9.8 mediante AJP + contrabando de solicitudes HTTP Funciona en todos los BIG-IP sin parche 13.x → 17.x incluyendo el último 17.1.0.3 Parche:...

CVE-2020-1938-Tool

CVE-2020-1938-Tool En primer lugar, agradecemos a hypn0s por la herramienta AJPY una biblioteca de Python para construir solicitudes del protocolo AJP. Este proyecto se basa en ella para detectar de forma masiva sitios vulnerables a GhostCat. Modo de uso Actualmente dispone de dos funciones...

ghostcatch

ghostcatch Python to disable AJP connectors in Apache Tomcat to remediate CVE-2020-1938 Ghostcat! Currently written for: Python 2.7 Requires: pip install progress Usage: python ghostCatch.py root@kitploit: -help is the flag for usage Example: python ghostCatch.py -help -path is the flag to specif...

tomcatfileread

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Explotación de lectura / inclusión de archivos del protocolo AJP de Tomcat — versión convertida a python3 del POC. Autor original python2: ydhcui — https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-l...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 Una potente herramienta de explotación en Python para la vulnerabilidad Ghostcat AJP de Apache Tomcat CVE-2020-1938 con funciones avanzadas para pruebas de penetración e investigación de seguridad. 🔍 Descripción general La vulnerabilidad Ghostcat...

httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

CVE-2020-1938

Declaración：所有网络安全工具的使用必须遵守国家法律法规、行业规范及目标系统的相关规定，不得用于任何非法或侵犯他人合法权益的用途。‌ 使用者应认识到，任何工具均无法保证绝对安全，不当使用可能导致法律风险、技术反制或数据污染。使用者需自行承担因违反本声明及相关规定而产生的全部责任。 Requisito：python3 Ejecución： python CVE-2020-1938.py your-ip -p 8009 -f WEB-INF/web.xml...

Exploit for CVE-2020-1938

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — pyt...

Exploit for CVE-2020-1938

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — pyt...

CVE-2019-20790

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:59+00:00| seen| https://t.me/hackingAttack/38673 2026-09-02 01:02:22+00:00| seen| https://t.me/hackingAttack/38673 2026-09-06 13:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38673 2026-09-07 01:00:14+00:00|...

httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...