CVE-2024-50379-exp

CVE-2024-50379-exp -t 条件竞争时间 -u 域名 -f 写入木马 测试发现第一次条件竞争时有很大几率会写入失败需要重新再进行一次条件竞争才会写入木马，所以脚本第一次会进行固定6秒条件竞争检测是否写入，没有会再进行用户自定义或者默认的10秒检测，生成的木马为随机md5.jsp root@kitploit: python .\CVE-2024-50379.py -u http://192.168.31.33:8888/ -f '123456' -t 10 image...

CVE-2024-50379-PoC

Vedi più PoC su https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Utilizzo dello script Rilevamento batch: python poc.py -f url.txt Rilevamento singolo: python poc.py -u your-ip...

CVE-2024-50379

手动 ausnutzen ist lästig, also habe ich schnell einen Exploit geschrieben. Verwendung: shell.jsp ist die Shell-Datei, ggsl.jsp ist der Name/Pfad, unter dem sie auf dem Zielserver gespeichert wird. ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp Haftungsausschluss Dieses Tool...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 ist eine schwerwiegende Sicherheitslücke, die Apache Tomcat betrifft und es einem Angreifer ermöglicht, falsche Konfigurationen oder Schwachstellen auszunutzen, um Code aus der Ferne auszuführen RCE. Bei Ausnutzung kann diese Schwachstelle zur Übernahme des Servers,...

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT Solo per uso didattico e di scambio, non utilizzare per scopi illegali RCE tramite una condizione di gara in Apache Tomcat riferimento: https://github.com/iSee857/CVE-2024-50379-PoC Demo Uso root@kitploit: go run main.go -u http://localhost:8080/ Da fare...

CVE-2024-50379

CVE-2024-50379 استغلال CVE-2024-50379 يجب أن يكون CVE-2024-50379.py و upload.txt في نفس الدليل. محتوى upload هو الحمولة webshell. محتوى upload هنا يقوم بإنشاء ملف 2.jsp. يمكن استخدام 2.jsp لإنشاء ملف 4.jsp جديد من نوع "Bingxie" الأصلي. root@kitploit:...

CVE-2024-50379-nuclei

CVE-2024-50379 Testare l'ultima vulnerabilità Apache Tomcat CVE-2024-50379...

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU Esecuzione Remota di Codice...

RockyLinux 10 : tomcat9 (RLSA-2025:11332)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11332 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

RockyLinux 9 : tomcat (RLSA-2025:11335)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11335 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

Security Bulletin: IBM Guardium Data Protection is affected by multiple Tomcat vulnerabilities (CVE-2025-24813, CVE-2024-50379)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-24813 DESCRIPTION: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files...

RLSA-2025:11333 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

RHEL 8 : tomcat (RHSA-2025:11382)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11382 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

RHEL 9 : tomcat (RHSA-2025:11334)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11334 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

RHEL 9 : tomcat (RHSA-2025:11335)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11335 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

ALSA-2025:11335 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

BIT-TOMCAT-2024-56337 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.1, from 10.1.0 through 10.1.33, from 9.0.0 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0...

TencentOS Server 3: tomcat (TSSA-2025:0304)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0304 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...