CVE-2025-24813-POC

JSP वेब शेल अपलोडर एक सरल Python टूल जो HTTP PUT अनुरोधों के माध्यम से एक या अधिक लक्ष्यों पर एक बुनियादी JSP वेब शेल अपलोड करता है। ⚠️ केवल शैक्षिक और अधिकृत पैनेट्रेशन टेस्टिंग के लिए। Apache Tomcat पथों में ../ अनुक्रमों के अनुचित हैंडलिंग के कारण पथ समतुल्यता/पथ ट्रैवर्सल समस्या के लिए...

CVE-2025-24813

CVE-2025-24813 - Apache Tomcat पथ समतुल्यता भेद्यता Apache Tomcat, पथों में ../ अनुक्रमों के अनुचित हैंडलिंग के कारण पथ समतुल्यता / पथ भ्रमण समस्या के लिए संवेदनशील है। CVE आईडी: CVE-2025-24813 गंभीरता: गंभीर संदर्भ लिंक: https://github.com/advisories/GHSA-83qj-6fr2-vhqg PoC चरण: 1. PUT विधि के...

CVE-Arsenal-Lab

TomcatScanner CVE-2025-24813 के लिए उन्नत पहचान और शोषण उपकरण TomcatScanner एक व्यापक सुरक्षा उपकरण है जो Apache Tomcat सर्वरों में CVE-2025-24813 भेद्यता का पता लगाने और शोषण करने के लिए डिज़ाइन किया गया है। इस भेद्यता में 'file.Name' पैरामीटर में एक पथ समानता path equivalence समस्या शामिल है जो...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 इस रिपॉज़िटरी में एक yaml-template शामिल है, जो यह स्कैन करने के लिए है कि कोई Service CVE-2025-24813 के प्रति असुरक्षित हो सकती है या नहीं, बिना सर्वर को बाधित किए/किसी भी प्रकार की क्षति पहुँचाए, vulnerability scanner nuclei का उपयोग करते हुए। CVE-2025-24813 CVE-2025-24813...

BIT-APACHE-2026-79768 Apache HTTP Server: mod_userdir information disclosure

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

Astra Linux – Vulnerability in Tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...

httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence

A flaw was found in Apache HTTP Server's moduserdir module. When configured with an absolute path without wildcards for the UserDir directive, the server fails to properly resolve single-dot directory '/./' path equivalence. A remote attacker can exploit this issue by submitting a crafted HTTP...

CVE-2026-79768

A flaw was found in Apache HTTP Server's moduserdir module. When configured with an absolute path without wildcards for the UserDir directive, the server fails to properly resolve single-dot directory '/./' path equivalence. A remote attacker can exploit this issue by submitting a crafted HTTP...

Linux Distros Unpatched Vulnerability : CVE-2026-79768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directiv...

AZL-106776 CVE-2026-79768 affecting package httpd 2.4.68-1

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

ALPINE-CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

DEBIAN-CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

UBUNTU-CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-79768 Apache HTTP Server: mod_userdir information disclosure

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-79768 Apache HTTP Server: mod_userdir information disclosure

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

EUVD-2026-90909

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-79768

The Apache HTTP Server versions 2.4.0 through 2.4.68 are vulnerable to a path equivalence issue (CWE-55) within the mod_userdir module. The vulnerability occurs when the module is configured with an absolute non-wildcard UserDir directive . This flaw can lead to information disclosure . No specif...