781 matches found
cve-2014-0050
cve-2014-0050 CVE-2014-0050 Vulnerable site sample This project aims to demonstrate the CVE-2014-0050 exploitation for educational purpose. For more informations, see : https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050--Exploit-with-Boundaries,-Loops-without-Boundaries/...
ACEDcup
ACEDcup ACEDcup tool is a payload generator for Java Binary Deserialization attack ACED For Apache Commons FileUpload ver = 1.3 CVE-2013-2186 and Oracle JDK ver 7u40 The attack works even for newer versions of the lib or Java. We can upload any content in any directory, but we cannot control a fi...
CVE-2019-14450
This repository does not have a README...
Rocky Linux 10.0 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14178)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514178 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...
Rocky Linux 10.0 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14179)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514179 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...
Rocky Linux 9 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14181)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514181 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...
Rocky Linux 8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14177)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514177 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...
CentOS Linux 7 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (CENTOS7:CLSA-2026:1780929699)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780929699 advisory. - Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker...
AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739387851)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739387851 advisory. - URL Redirection to Untrusted Site 'Open Redirect' vulnerability in FORM authentication feature Apache Tomcat.This issue affects...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS through the parsing of untrusted MIME messages, specifically in the findContentBoundary, add, and parse processes. An attacker can cause excessive CPU and memory consumption by submitting specially crafted email...
PT-2026-83787
Name of the Vulnerable Software and Affected Versions Apache Wicket versions 8.0.0 through 8.18.0 Apache Wicket versions 9.0.0 through 9.23.0 Apache Wicket versions 10.0.0 through 10.10.0 Description An issue exists when parsing multipart requests where the request body has already been consumed ...
CLSA-2026-1786449156 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.3.1-tuxcare.2...
CLSA-2026-1785906695 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.3.1-tuxcare.1...
CLSA-2026-1779410882 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.1-tuxcare.3...
CLSA-2026-1779324465 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.2-tuxcare.3...
CLSA-2026-1779410887 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.4...
CLSA-2026-1777509601 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.5-tuxcare.2...
CLSA-2026-1777509603 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.2...