CVE-2026-65183

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-65183

Apache Tomcat is affected by a TOCTOU race condition when creating Unix Domain Sockets, allowing an unauthorised local user to access the socket. The Tomcat security team rates this as Low severity, though the CNA-assigned CVSS 3.1 score is 8.1 (HIGH) . Affected versions: 11.0.0-M1 through 11.0.2...

CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 Uma poderosa ferramenta de exploração em Python para a vulnerabilidade Apache Tomcat AJP Ghostcat CVE-2020-1938, com funcionalidades avançadas para testes de penetração e pesquisa de segurança. 🔍 Visão Geral A vulnerabilidade Ghostcat CVE-2020-1938 permit...

CVE-2020-1938

CVE-2020-1938 Suricata Erkennungsregeln root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo";...

cve-2026-43512-poc

CVE-2026-43512 — Bypass de Autenticação DIGEST do Apache Tomcat Resultado da análise de explorabilidade: a causa raiz está confirmada. A exploração de ponta a ponta não é reproduzível contra uma implantação padrão do UserDatabaseRealm. Veja Análise para detalhes. Índice Visão Geral Versões Afetad...

CVE-2025-24813-Exploit

CVE-2025-24813-Exploit Exploit per l'esecuzione di codice remoto RCE in Apache Tomcat - CVE-2025-24813 🚀 Exploit RCE per Apache Tomcat - CVE-2025-24813 🔥 Strumento di Exploit e Rilevamento per Apache Tomcat RCE CVE-2025-24813 Questa repository contiene un exploit PoC Proof of Concept per la...

CVE-2025-55668

CVE-2025-55668 Apache Tomcat - Fixação de sessão via rewrite valve...

CVE-2017-12615-PoC

CVE 2017-12615 Apache Tomcat Windows RCE ⚠️Warnung Dies ist eine Proof-of-Concept-Umgebung und ein Exploit für bekannte CVEs, ausschließlich zu Lern- und Bildungszwecken. Verwenden Sie diese Skripte oder Techniken nicht auf Systemen, die Ihnen nicht gehören oder für die Sie keine ausdrückliche...

Apache-GOExploiter

🛠 ApacheGoExploiter – Toolkit di Exploit per il Metodo PUT CVE-2025-24813 ApacheGoExploiter è uno strumento proof-of-concept basato su Go per scansionare e sfruttare server Apache Tomcat vulnerabili a CVE-2025-24813. Verifica il supporto HTTP PUT esposto sulla porta 8080 e tenta di caricare file ...

Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. id: CVE-2026-34486 info: name: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote...

CVE-2024-50379-nuclei

CVE-2024-50379 Testare l'ultima vulnerabilità Apache Tomcat CVE-2024-50379...

cve-2026-43515-poc

CVE-2026-43515 — Bypass delle restrizioni di sicurezza in Apache Tomcat Giudizio di sfruttabilità: confermato sfruttabile. Una richiesta POST verso una risorsa protetta da una configurazione con divisa bypassa completamente l'autenticazione. La struttura web.xml richiesta è poco comune nelle...

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU Esecuzione Remota di Codice...

CVE-2020-1938-MSF-MODULE

CVE-2020-1938-MSF-MODULE Versione modificata di auxiliary/admin/http/tomcatghostcat, Leggi qualsiasi file Sovrascrivi il file/metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb e riavvia msfconsole per eseguire reloadall. Successivamente puoi utilizzare il modulo...

PT-2026-81891

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.43 through 7.0.109...

PT-2026-81884

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.30 through 7.0.109...