Lucene search
+L

1 matches found

Packet Storm
Packet Storm
added 2025/04/03 12:0 a.m.489 views

📄 Tomcat Partial PUT Java Deserialization

This Metasploit module exploits a Java deserialization vulnerability in Apache Tomcats session restoration functionality that can be exploited with a partial HTTP PUT request to place an attacker controlled deserialization payload in the tomcatrootdir/webapps/ROOT/ directory. For the exploit to...

9.8CVSS9AI score0.99925EPSS
SaveExploits47
Rows per page
Query Builder