Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130123 advisory. Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130103 advisory. Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130129 advisory. Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130101 advisory. Observable Timing Discrepancy vulnerabilitywhen comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-...

CVE-2022-22965

Spring4Shell Vulnerability - CVE-2022-22965 📕 Introduction The spring4shell vulnerability was named this way due to 2 vulnerabilities found and widely exploited by attackers in early 2022. One of these vulnerabilities is in the framework component called "Spring Cloud Functions" less critical and...

CVE-2022-41404-DoS-Protection

CVE-2022-41404-DoS-Protection Windows Apache Tomcat resource limits implementation guide for CVE-2022-41404 DoS vulnerability protection...

tomcat-line-check

tomcat-line-check CVE-2026-24880 · GHSA-563x-q5rq-57qp —— Apache 那句 upgrade to version 11.0.20, 10.1.52 or 9.0.116 对你成不成立? 对多数人不成立,而且有四种不同的不成立方式。这个工具扫你的构件,告诉你是哪一种。 java -jar tomcat-line-check.jar /path/to/tomcat 解压部署的 Tomcat java -jar tomcat-line-check.jar app.war war java -jar...

CVE-2026-24733

CVE-2026-24733 What is CVE-2026-24733? Apache Tomcat incorrectly handled an HTTP/0.9-style HEAD request under certain security-constraint configurations. CVE-2026-24733 Defensive Verifier A lightweight, dependency-free Python security verifier for CVE-2026-24733 , an Apache Tomcat HTTP/0.9 HEAD...

Ghostcat-Tomcat-AJP-Exploit-Py3

Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerability Detection Tool Introduction This project provides a Python verification script for verifying the Apache Tomcat AJP protocol local file inclusion vulnerability commonly known as Ghostcat, CVE-2020-1938 / CNVD-2020-10487. This script is ...

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Remote Code Execution via Session Deserialization Unauthenticated partial PUT + path traversal + gadget-driven deserialization Description Apache Tomcat instances with the default servlet PUT enabled readonly=false allow writing files via HTTP PUT requests. By...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...

cve-2017-12615

CVE-2017-12615 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-12615 Image author: https://github.com/Medicean/VulApps/tree/master/t/tomcat/1...

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813 Apache Tomcat Vulnerability POC CVE-2025-24813...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813- Apache Tomcat - Remote Code Execution via Session Deserialization CVE-2025-24813...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

CVE-2025-55668

CVE-2025-55668 Apache Tomcat - Session fixation via rewrite valve...

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability Overview CVE202452316 is an authentication bypass vulnerability identified in Apache Tomcat. This issue arises when Tomcat is configured with a custom Jakarta Authentication formerly JASPIC ServerAuthContext...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

Java-Compressed-file-security

Java-Compressed-file-security java web Compressed File Security Vulnerability Test environment: Windows For Apache Tomcat/8.5.16 0x01 Crafting a Directory Traversal Malicious Compressed File Code: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary ...

CVE-2025-24813

Apache Tomcat Unauthenticated RCE - CVE-2025-24813 This repository provides a guide and testing environment to assess the CVE-2025-24813 vulnerability. Details Affected Versions: Apache Tomcat 11.0.0-M1 to 11.0.2 Apache Tomcat 10.1.0-M1 to 10.1.34 Apache Tomcat 9.0.0.M1 to 9.0.98 References...