Lucene search
+L

78 matches found

Kitploit
Kitploit
added 2026/08/27 2:08 a.m.2 views

CVE-2024-50379-PoC

更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X 脚本使用 批量检测: python poc.py -f url.txt 单个检测: python poc.py -u your-ip...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/27 12:33 a.m.2 views

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT केवल सीखने और संवाद के लिए उपयोग करें, अवैध उपयोग न करें Apache Tomcat में एक रेस कंडीशन के माध्यम से RCE संदर्भ: https://github.com/iSee857/CVE-2024-50379-PoC डेमो उपयोग root@kitploit: go run main.go -u http://localhost:8080/ करने के लिए सफल शोषण का पता लगाने...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13References1
Kitploit
Kitploit
added 2026/08/27 12:12 a.m.2 views

CVE-2024-50379

手动利用麻烦,搓一个exp。。 食用: shell.jsp 是shell文件,ggsl.jsp是保存到目标服务器上的名称/路径 ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp 免责声明 本工具仅面向合法授权 的企业安全建设行为,如您需要测试本工具的可用性,请自行搭建靶机环境。 在使用本工具进行检测时,您应确保该行为符合当地的法律法规,并且已经取得了足够的授权。请勿对非授权目标进行扫描。 如您在使用本工具的过程中存在任何非法行为,您需自行承担相应后果,我们将不承担任何法律及连带责任。...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/26 11:42 p.m.2 views

CVE-2024-50379-exp

CVE-2024-50379-exp -t время гонки условий -u домен -f запись веб-шелла В ходе тестирования было обнаружено, что при первой гонке условий существует большая вероятность неудачной записи. Для успешной записи веб-шелла требуется повторная гонка условий. Поэтому скрипт сначала выполняет фиксированную...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/26 9:45 p.m.2 views

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 هي ثغرة أمنية خطيرة تؤثر على Apache Tomcat، وتسمح للمهاجمين باستغلال الأخطاء في الإعدادات أو نقاط الضعف لتنفيذ التعليمات البرمجية عن بُعد RCE. عند استغلالها، يمكن أن تؤدي هذه الثغرة إلى السيطرة على الخادم، أو تسريب البيانات، أو تصعيد الامتيازات. الهدف من هذا المستودع...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/26 8:24 p.m.2 views

CVE-2024-50379

CVE-2024-50379 استغلال CVE-2024-50379 يجب أن يكون CVE-2024-50379.py و upload.txt في نفس الدليل. محتوى upload هو الحمولة webshell. محتوى upload هنا يقوم بإنشاء ملف 2.jsp. يمكن استخدام 2.jsp لإنشاء ملف 4.jsp جديد من نوع "Bingxie" الأصلي. root@kitploit:...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/25 5:57 a.m.1 views

CVE-2024-50379-nuclei

CVE-2024-50379 Testare l'ultima vulnerabilità Apache Tomcat CVE-2024-50379...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/25 2:31 a.m.2 views

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU Esecuzione Remota di Codice...

9.8CVSS8.7AI score0.44312EPSS
SaveExploits13
Tenable Nessus
Tenable Nessus
added 2025/10/04 12:00 a.m.10 views

RockyLinux 10 : tomcat9 (RLSA-2025:11332)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11332 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

9.8CVSS7.6AI score0.5992EPSS
SaveExploits18References5
Tenable Nessus
Tenable Nessus
added 2025/10/04 12:00 a.m.8 views

RockyLinux 9 : tomcat (RLSA-2025:11335)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11335 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

9.8CVSS7.6AI score0.5992EPSS
SaveExploits18References5
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/05 3:40 p.m.30 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple Tomcat vulnerabilities (CVE-2025-24813, CVE-2024-50379)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-24813 DESCRIPTION: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files...

10CVSS9.9AI score0.99927EPSS
SaveExploits61Affected Software1
Rockylinux
Rockylinux
added 2025/07/29 1:38 p.m.16 views

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

9.8CVSS7AI score0.5992EPSS
SaveExploits18
OSV
OSV
added 2025/07/29 1:38 p.m.16 views

RLSA-2025:11333 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

8.1CVSS7.7AI score0.5992EPSS
SaveExploits18References3
Tenable Nessus
Tenable Nessus
added 2025/07/17 12:00 a.m.8 views

RHEL 8 : tomcat (RHSA-2025:11382)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11382 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

9.8CVSS7.7AI score0.5992EPSS
SaveExploits18References6
AlmaLinux
AlmaLinux
added 2025/07/16 12:00 a.m.14 views

Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

9.8CVSS9.3AI score0.5992EPSS
SaveExploits18References6
Tenable Nessus
Tenable Nessus
added 2025/07/16 12:00 a.m.10 views

RHEL 9 : tomcat (RHSA-2025:11334)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11334 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

9.8CVSS7.7AI score0.5992EPSS
SaveExploits18References6
Tenable Nessus
Tenable Nessus
added 2025/07/16 12:00 a.m.10 views

RHEL 9 : tomcat (RHSA-2025:11335)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11335 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

9.8CVSS7.7AI score0.5992EPSS
SaveExploits18References6
OSV
OSV
added 2025/07/16 12:00 a.m.17 views

ALSA-2025:11335 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

9.8CVSS9.2AI score0.5992EPSS
SaveExploits18References6
OSV
OSV
added 2025/07/10 10:46 a.m.59 views

BIT-TOMCAT-2024-56337 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.1, from 10.1.0 through 10.1.33, from 9.0.0 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0...

9.8CVSS6.7AI score0.09028EPSS
SaveExploits13References5
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.15 views

TencentOS Server 3: tomcat (TSSA-2025:0304)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0304 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

10CVSS8.8AI score0.99927EPSS
SaveExploits61References3
Rows per page
Query Builder