Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure

A recently disclosed security flaw impacting Apache Tomcat has come under active exploitation in the wild following the release of a public proof-of-concept PoC a mere 30 hours after public disclosure. The vulnerability, tracked as CVE-2025-24813 , affects the below versions - Apache Tomcat...

GHSA-94VH-GPHV-8PM8

creationtimestamp| type| source ---|---|--- 2025-03-17 13:47:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7771 2025-03-17 16:33:06+00:00| published-proof-of-concept| Telegram/k2hWLXjvKh8ojTF1EeSN0Mqc987DrfNzj7Aa-hbf1HoriQ...

GHSA-PQQ3-Q84H-PJ6X

creationtimestamp| type| source ---|---|--- 2025-03-17 13:47:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7770...

GHSA-93MQ-9FFX-83M2

creationtimestamp| type| source ---|---|--- 2025-03-17 13:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7769 2025-03-17 16:33:06+00:00| published-proof-of-concept| Telegram/k2hWLXjvKh8ojTF1EeSN0Mqc987DrfNzj7Aa-hbf1HoriQ...

GHSA-V3WJ-7VJ5-XJ5V

creationtimestamp| type| source ---|---|--- 2025-03-17 13:46:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7767...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

CVE-2023-4911 This is a PoC Proof Of Concept for the Looney...

CVE-2025-26895

creationtimestamp| type| source ---|---|--- 2025-03-16 02:09:41+00:00| seen| https://t.me/cvedetector/20385 2025-03-17 16:47:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7804...

GHSA-XC76-5PF9-MX8M

creationtimestamp| type| source ---|---|--- 2025-03-15 21:45:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7692...

Exploit for CVE-2024-5535

CVE-2024-5535 PoC - OpenSSL NPN Bu...

CVE-2024-31324

creationtimestamp| type| source ---|---|--- 2025-03-15 15:45:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7683...

GHSA-8522-69FH-W74X

creationtimestamp| type| source ---|---|--- 2025-03-14 21:44:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7641...

Exploit for CVE-2025-1094

Analysis of CVE-2025-1094 and Emulation Setup This detailed e...

GHSA-5X5W-5C99-VR8H

creationtimestamp| type| source ---|---|--- 2025-03-14 19:45:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7635...

CVE-2023-37057

creationtimestamp| type| source ---|---|--- 2025-03-14 19:44:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7630...

GHSA-9P8X-F768-WP2G

creationtimestamp| type| source ---|---|--- 2025-03-14 19:00:48+00:00| published-proof-of-concept| Telegram/pRPgTuKpNgH7y7yHOR5VIq4CCObEljNgHBGQunGS6T0fn0Q...

Flowise allows arbitrary file write to RCE

Summary An attacker could write files with arbitrary content to the filesystem via the /api/v1/document-store/loader/process API. An attacker can reach RCERemote Code Execution via file writing. Details All file writing functions in packages/components/src/storageUtils.ts are vulnerable. -...

CVE-2024-33436

creationtimestamp| type| source ---|---|--- 2025-03-14 17:48:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7603...

RHSA-2024:8039

creationtimestamp| type| source ---|---|--- 2025-03-14 16:43:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7583 2025-05-01 16:14:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14322...

RHSA-2024:7925

creationtimestamp| type| source ---|---|--- 2025-03-14 16:43:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7583 2025-05-01 16:14:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14322...

RHSA-2024:8238

creationtimestamp| type| source ---|---|--- 2025-03-14 16:43:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7583 2025-05-01 16:14:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14322...