CVE-2024-50379

الاستغلال اليدوي مزعج، لذا أعددتُ exp.. طريقة الاستخدام: shell.jsp هو ملف الشل، و ggsl.jsp هو الاسم/المسار المحفوظ على الخادم الهدف ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp إخلاء المسؤولية هذه الأداة مخصصة فقط لأنشطة بناء أمن المؤسسات المصرح بها قانونًا. إذا كنت بحاج...

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT للاستخدام التعليمي فقط، يُرجى عدم استخدامه لأغراض غير قانونية RCE من خلال حالة سباق في Apache Tomcat المرجع: https://github.com/iSee857/CVE-2024-50379-PoC Demo Usage go run main.go -u http://localhost:8080/ Todo آلية الكشف عن نجاح استغلال الثغرة...

CVE-2024-50379

CVE-2024-50379 استغلال CVE-2024-50379 يجب أن يكون CVE-2024-50379.py و upload.txt في نفس الدليل. محتوى upload هو الحمولة webshell. محتوى upload هنا يقوم بإنشاء ملف 2.jsp. يمكن استخدام 2.jsp لإنشاء ملف 4.jsp جديد من نوع "Bingxie" الأصلي...

CVE-2024-50379-PoC

لمزيد من PoC انظر https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X استخدام السكربت فحص جماعي: python poc.py -f url.txt فحص فردي: python poc.py -u your-ip...

CVE-2024-50379-exp

CVE-2024-50379-exp -t زمن سباق الحالة -u النطاق -f كتابة حصان الطروادة أظهر الاختبار أن محاولة سباق الحالة الأولى لديها احتمال كبير للفشل في الكتابة، وتتطلب إعادة تنفيذ سباق الحالة مرة أخرى لكتابة حصان الطروادة. لذلك، يقوم السكربت أولًا بسباق ثابت لمدة 6 ثوانٍ للتحقق من نجاح الكتابة، وإذا لم تنجح...

CVE-2024-50379-nuclei

CVE-2024-50379 Test de la latset Apache Tomcat CVE-2024-50379 Vuln...

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU रिमोट कोड निष्पादन...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 هي ثغرة أمنية خطيرة تؤثر على Apache Tomcat، وتسمح للمهاجمين باستغلال الأخطاء في الإعدادات أو نقاط الضعف لتنفيذ التعليمات البرمجية عن بُعد RCE. عند استغلالها، يمكن أن تؤدي هذه الثغرة إلى السيطرة على الخادم، أو تسريب البيانات، أو تصعيد الامتيازات. الهدف من هذا المستودع...

Photon OS 5.0: Apache PHSA-2025-5.0-91-0445

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0445. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RockyLinux 10 : tomcat9 (RLSA-2025:11332)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11332 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

RockyLinux 9 : tomcat (RLSA-2025:11335)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11335 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

Security Bulletin: IBM Guardium Data Protection is affected by multiple Tomcat vulnerabilities (CVE-2025-24813, CVE-2024-50379)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-24813 DESCRIPTION: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files...

RLSA-2025:11333 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

RHEL 8 : tomcat (RHSA-2025:11382)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11382 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

RHEL 9 : tomcat (RHSA-2025:11335)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11335 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

ALSA-2025:11335 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

RHEL 9 : tomcat (RHSA-2025:11334)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11334 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

BIT-TOMCAT-2024-56337 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.1, from 10.1.0 through 10.1.33, from 9.0.0 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0...