PT-2026-81885

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Description An off-by-one error in the rewrite valve...

PT-2026-81876

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...

PT-2026-81878

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.20 through 11.0.24 Apache Tomcat versions 10.1.53 through 10.1.57 Apache Tomcat versions 9.0.115 through 9.0.120 Description Improper input validation occurs due to an incomplete fix for a previous issue...

CVE-2025-24813-POC

CVE-2025-24813 Apache Tomcat RCE PoC PoC pour CVE-2025-24813, une vulnérabilité d'exécution de code à distance RCE dans Apache Tomcat. Important : Ce PoC est destiné uniquement à tester vos propres environnements ou à des fins éducatives. Toute utilisation de ce PoC pour exploiter des systèmes sa...

ghostcatch

ghostcatch Python para desativar conectores AJP no Apache Tomcat para corrigir CVE-2020-1938 Ghostcat! Atualmente escrito para: Python 2.7 Requer: pip install progress Uso: python ghostCatch.py root@kitploit: -help é a opção de uso Exemplo: python ghostCatch.py -help -path é a opção para...

POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution

⚠️🚀 CVE-2025-24813 — Suíte de Exploração RCE Apache Tomcat root@kitploit: ⚡ Versão: 1.0 🛡️ CVE ID: CVE-2025-24813 Apache Tomcat RCE 🧬 Payloads: ysoserial / Java 🌐 Modo: Interativo + Stealth 🔬 Uso: Ético, Investigativo, Educativo 🌌 Visão Geral...

CVE-2026-34486

CVE-2026-34486 Bypass fail-open di EncryptInterceptor nel clustering di Apache Tomcat Tribes che porta a RCE non autenticata tramite deserializzazione Java. Versioni interessate: 11.0.19+, 10.1.53+, 9.0.116+. Corretto in: 11.0.21, 10.1.54, 9.0.117. Trovata e segnalata da Bartlomiej Dmitruk...

Ghostcat-CNVD-2020-10487

Ghostcat Exploit für CNVD-2020-10487 CVE-2020-1938 Dateilesen und Dateiausführung durch beliebige Attributsetzung im Tomcat AJP-Protokoll. Schwachstellenanalyse Der Code dient ausschließlich Sicherheitstests. Verwenden Sie ihn nicht für illegale Zwecke. Der Benutzer trägt die alleinige...

Astra Linux – Vulnerability in Tomcat9

Apache Tomcat has a Relative Path Traversal vulnerability. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This created the possibility that, for rewrite rules that modify query parameters into the URL, an attacker could manipulate the...

Astra Linux – Vulnerability in Tomcat9

DEPRECATED: There is a vulnerability related to authentication bypass in digest authentication in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.21, 10.1.0-M1 through 10.1.54, 9.0.0.M1 through 9.0.117, 8.5.0 through 8.5.100, and versions prior to 7.0.0...

CVE-2011-1571

CVE-2011-1571 Zusammenfassung Nicht spezifizierte Sicherheitslücke im XSL-Content-Portlet in Liferay Portal Community Edition CE 5.x und 6.x vor 6.0.6 GA, wenn Apache Tomcat verwendet wird, ermöglicht entfernten Angreifern, beliebige Befehle über unbekannte Vektoren auszuführen. CVE-Details :...

Spring4Shell-POC

Spring4Shell CVE-2022-22965 - Proof of Concept di Esecuzione Remota di Codice Un Proof of Concept PoC completamente containerizzato che dimostra lo sfruttamento di Spring4Shell CVE-2022-22965 , che porta all'Esecuzione Remota di Codice RCE contro un'applicazione Spring Framework vulnerabile...

Exploit for Path Equivalence in Apache Tomcat

No d...

Fixed in Apache Tomcat 10.1.59

Note: The issues below were fixed in Apache Tomcat 10.1.58 but the release vote for the 10.1.58 release candidate did not pass. Therefore, although users must download 10.1.59 to obtain a version that includes a fix for these issues, version 10.1.58 is not included in the list of affected version...

GHSA-RXJR-6C9Q-H67X

creationtimestamp| type| source ---|---|--- 2026-08-19 21:16:30+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mthnpgazgt2v...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Beschreibung Diese Nuclei-Vorlage erkennt Apache Tomcat-Server, die anfällig für die TOCTOU-Race-Condition sind, die eine Remote Code Execution RCE ermöglicht. ⚠ Wichtiger Hinweis : Diese Vorlage darf ausschließlich zu Bildungszwecken und in kontrollierten Umgebunge...

ROS-20260819-73-0056

The vulnerability in Tomcat is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

KLA91234 SB vulnerabilities in Apache Tomcat

Security bypass vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass security restrictions. 2. Security vulnerability in...

Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager

Summary Multiple vulnerabilities were addressed in IBM Edge Application Manager 5.0.4 Vulnerability Details CVEID:CVE-2025-48988 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from...

BIT-TOMCAT-2026-66299 Apache Tomcat: DoS via WebSocket chat example

Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application...