tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure

A flaw was found in Apache Tomcat. When the server is configured to enforce FIPS Federal Information Processing Standards mode, a failure during FIPS activation causes Tomcat to log an error and continue running with standard non-FIPS cryptographic providers instead of terminating securely. This...

tomcat: tomcat: Information disclosure via incorrect object recycling in HTTP/2 processing

A flaw was found in Apache Tomcat. Incorrect object recycling and reuse during the HTTP/2 processing of asynchronous servlets can cause requests and responses to be mixed up between different users. A remote attacker could exploit this vulnerability to trigger unintended data cross-over,...

tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm

A flaw was found in Apache Tomcat. When the Java Naming and Directory Interface JNDI realm is configured with a non-Generic Security Service Application Program Interface GSSAPI Simple Authentication and Security Layer SASL mechanism, a missing verification step allows an attacker to bypass...

tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanup

A flaw was found in Apache Tomcat. Due to an incomplete cleanup vulnerability, HTTP Hypertext Transfer Protocol trailer headers from a previous request can persist and leak into a subsequent request processed on the same connection. This issue may allow a remote user to access sensitive request...

tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)

A flaw was found in Apache Tomcat. The application fails to halt execution after sending an HTTP redirect response, resulting in an Execution After Redirect EAR condition. A remote attacker could exploit this flaw by ignoring the redirect instruction to access responses generated after the...

tomcat: Apache Tomcat: Information disclosure via buffer under-read during non-blocking writes

A flaw was found in Apache Tomcat. During large non-blocking write operations, a buffer under-read can cause an HTTP response body to be split between the current request and the subsequent request handled on the same connection. A remote user sending a follow-up request could receive sensitive...

tomcat: Apache Tomcat: Possible TLS 1.3 connection failures

A flaw was found in Apache Tomcat. An incomplete cleanup vulnerability can cause Transport Layer Security TLS 1.3 connections to fail intermittently. This issue may prevent remote clients from establishing secure connections, resulting in an intermittent Denial of Service DoS...

tomcat: tomcat: Unauthorized socket access via TOCTOU race condition

A flaw was found in Apache Tomcat. A local attacker can gain unauthorized access to Unix domain communication sockets due to a time-of-check to time-of-use TOCTOU race condition in the APR/Native connector. When the connector initializes a socket, a brief timing window exists before restrictive...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Directory-protection bypass via Rewrite Valve → PUT-based RCE🚨🚨 Summary CVE-2025-55752 is a security regression in Apache Tomcat introduced while fixing bug 60013. When the Rewrite Valve is used, Tomcat applies path normalization before URL decoding. This...

CVE-2017-12615-PoC

CVE 2017-12615 Apache Tomcat Windows RCE ⚠️Warning This is a proof of concept environment and exploit for known CVEs, strictly for learning and educational purposes. Do not use these scripts or techniques on systems you do not own or have explicit permission to test. Unauthorised access or...

CVE-2025-24813

Description This repository is an environment for reproducing the latest RCE of CVE-2025-24813 Tomcat. For learning and research purposes only! Exploitation Conditions The application has enabled the DefaultServlet write functionality, which is disabled by default. The application supports partia...

CVE-2024-50379-nuclei

CVE-2024-50379 Testing the latset Apache Tomcat CVE-2024-50379 Vuln...

Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

Tomcat Vulnerability Scanner A tool to detect CVE-2025-31650 in Apache Tomcat servers using Shodan integration. Features HTTP/2 priority vulnerability detection Shodan target discovery CSV/JSON reporting Installation python -m venv venv source venv/bin/activate pip install -r requirements.txt...

PoC_CVE-2020-9484

This repository contains a proof of concept exploit for CVE-2020-9484, along with an example web server that is vulnerable to this exploit. Prerequisites for this vulnerability to be exploitable Affected tomcat versions are: Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache Tomcat 8.x...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

cve-2017-12615

CVE-2017-12615 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-12615 Image author: https://github.com/Medicean/VulApps/tree/master/t/tomcat/1...

Spring-Boot-Tomcat-CVE-2025-24813

CVE-2025-24813: Apache 1. Explanation Tomcat is vulnerable because of two separate vulnerabilities, the first is a weakness in the DefaultServlet which allows partial puts to write a temp directory see:...

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813 Apache Tomcat Vulnerability POC CVE-2025-24813...

CVE-2025-55668

CVE-2025-55668 Apache Tomcat - Session fixation via rewrite valve...

PT-2026-118373

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.26 Apache Tomcat versions 10.1.0-M1 through 10.1.60 Apache Tomcat versions 9.0.0.M1 through 9.0.122 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...