POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 和 CVE-2025-48976 关于 本项目运行一个简单的文件上传端点，使用 Tomcat 10.1.41 和 Jakarta Servlet。 默认情况下，该漏洞利用程序会从 50 个工作节点并发发送 1000 个并行化的多部分请求，每个请求包含 1000 个部分和每个部分 50 个头。 运行 POC 构建并运行 Docker 容器： docker build -t poc-cve-2025-48988 . docker run -p 8080:8080 poc-cve-2025-48988 启动漏洞利用程序： python3...

Fedora: Security Advisory for jakarta-servlet (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: jakarta-servlet-5.0.0-18.fc40

Jakarta Servlet defines a server-side API for handling HTTP requests and responses...

Fixed in Apache Tomcat 9.0.71

Important: Apache Tomcat denial of service CVE-2023-24998 Apache Tomcat uses a packaged renamed copy of Apache Commons FileUpload to provide the file upload functionality defined in the Jakarta Servlet specification. Apache Tomcat was, therefore, also vulnerable to the Apache Commons FileUpload...

openSUSE: Security Advisory for log4j (openSUSE-SU-2021:1601-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for log4j (important)

openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:1601-1 Rating: important References: 1193743 Cross-References: CVE-2021-44228 CVE-2021-45046 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...