278 matches found
CVE-Arsenal-Lab
TomcatScanner Advanced Detection and Exploitation Tool for CVE-2025-24813 TomcatScanner is a comprehensive security tool designed for detecting and exploiting the CVE-2025-24813 vulnerability in Apache Tomcat servers. This vulnerability involves a path equivalence issue in the 'file.Name' paramet...
CVE-2025-24813
CVE-2025-24813 - Apache Tomcat Path Equivalence Vulnerability Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../ sequences in paths. CVE ID: CVE-2025-24813 Severity: Critical Reference link: https://github.com/advisories/GHSA-83qj-6fr2-vhqg Po...
CVE-2025-24813-POC
JSP Web Shell Uploader A simple Python tool for uploading a basic JSP web shell to one or more targets via HTTP PUT requests. ⚠️ For educational and authorized penetration testing only. Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../...
nuclei-CVE-2025-24813
nuclei-CVE-2025-24813 This repository contains a yaml-template, to scan whether a Service may be vulnerable to CVE-2025-24813, without disrupting the server/causing any form of damage, using the vulnerability scanner nuclei. CVE-2025-24813 CVE-2025-24813 is a vulnerability in the Apache Tomcat...
CVE-2026-88136
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...
CVE-2026-70184
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-108463
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-102231
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102217
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...
CVE-2026-108463
A vulnerability in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network due to the improper resolution of path equivalence (CWE-41). The impact is rated as HIGH for confidentiality, integrity, and availability. No specific exploitative code or remediatio...
CVE-2026-102217
A vulnerability exists in WebDAV due to improper resolution of path equivalence . This flaw allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is associated with CWE-41 and has been assigned a HIGH base severity score of 8.8 under CVSS v3.1. No specific...
EUVD-2026-100372
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...
CVE-2026-88136
A vulnerability in Web Distributed Authoring and Versioning (WebDAV) allows an authorized attacker to achieve remote code execution over a network. The root cause is the improper resolution of path equivalence (CWE-41). The issue carries a High severity rating with a CVSS 3.1 score of 8.8 , poten...
CVE-2026-102231
A security feature bypass vulnerability exists in Visual Studio Code due to the improper resolution of path equivalence . This flaw allows an unauthorized attacker to bypass local security features. The vulnerability has been identified by Microsoft and is categorized under CWE-41 . While the spe...
EUVD-2026-99036
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Visual Studio Code Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...
Windows Backup Engine Elevation of Privilege Vulnerability
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...