CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

Escaneo multihilo en Python2 de la vulnerabilidad de lectura de archivos del protocolo Tomcat-Ajp Beneficio para cazadores de SRC PoC obtenido de https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, ¡¡¡¡el autor del PoC no soy yo!!!! Operación 1. Colocar los dominios/IP a escanear en ip.txt...

CNVD-2020-10487

Descripción La herramienta es únicamente para investigación de seguridad y auditoría interna. Se prohíbe usarla para realizar ataques ilegales. Las consecuencias derivadas de su uso son responsabilidad del usuario. Herramienta de detección masiva de la vulnerabilidad de inclusión de archivos de...

CVE-2020-1938

CVE-2020-1938 Regole di rilevamento root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath...

Ghostcat-Tomcat-AJP-Exploit-Py3

Strumento di rilevamento della vulnerabilità Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Introduzione Questo progetto fornisce uno script Python per verificare la vulnerabilità di inclusione locale di file nel protocollo AJP di Apache Tomcat comunemente nota come Ghostcat, CVE-2020-1938 /...

ghostcat

Ghostcat - CVE-2020-1938 Exploit Liest Tomcat-Dateien über den AJP-Connector Port 8009 Verwendung: python3 ghostcat.py Datei """ Skript speichern cat ghostcat.py 'PYEOF' AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA PYEOF Berechtigungen erteilen und ausführen chmod +x ghostcat.py tomcat-users.xml lesen...

CVE-2020-1938

Dichiarazione: L'uso di tutti gli strumenti di cybersecurity deve essere conforme alle leggi e ai regolamenti nazionali, agli standard di settore e alle regole del sistema target. Non deve essere utilizzato per scopi illegali o che violano i diritti legittimi di altri. Gli utenti devono essere...

CVE-2020-1938

CVE-2020-1938 Suricata Erkennungsregeln root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo";...

Linux Distros Unpatched Vulnerability : CVE-2026-15554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared- secret authentication. This enables an unauthenticated...

DEBIAN-CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

EUVD-2026-55981

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

PT-2026-70088

Name of the Vulnerable Software and Affected Versions Undertow affected versions not specified Description The Undertow AJP listener accepts forged ssl cert and is ssl AJP attributes without requiring shared-secret authentication. This allows an unauthenticated attacker with direct TCP access to...

Exploit for CVE-2020-1938

Ghostcat - CVE-2020-1938 Exploit Lee archivos del Tomcat via AJP...

EUVD-2007-1485

Malware in sbrugna...

SUSE CVE-2013-3707

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 OES 2 Linux, and OES 11 Linux Gold and SP1, does not make the intended SSLfree and SSLshutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

Exploit for CVE-2020-1938

It is an exploit module/toolkit targeting Apache Tomcat. The primary CVE ID is CVE-2020-1938, also known as CNVD-2020-10487. The vulnerability class is Local File Inclusion LFI. The probable entry point is the poc.py script, which is typically invoked by running python poc.py with the required...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...