AttackTomcat

AttackTomcat Vulnerability Detection List CVE-2017-12615 PUT file upload vulnerability tomcat-pass-getshell weak authentication deployment war package Weak password brute force CVE-2020-1938 Tomcat file read/inclusion Usage Before first use, please reset the configuration file in settings. For...

CVE-2025-24813

Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...

PT-2026-99855

Name of the Vulnerable Software and Affected Versions Thinkware U3000 versions prior to 1.02.04 Description An issue exists in the TCP Service component where manipulating the path argument within the PUT FILE function for the file /tmp/wpa supplicant.conf can lead to improper access controls. Th...

PT-2026-80635

Through version 1.3.0, the jailexec connection plugin's put file resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands follow symbolic links, and the path was operated on outside the jail, so a symlink existing inside the...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 – Apache Tomcat RCE Exploit Descrição ---------...

Ingenico Telium 2 POS Buffer Overflow Vulnerability (CNVD-2020-52336)

Ingenico Telium 2 POS is a cash register system. A buffer overflow vulnerability exists in the Ingenico Telium 2 POS NTPT3 RemotePutFile command, which can be exploited by a remote attacker to submit a special request and execute arbitrary code in the application context...

OpenText Documentum Content Server Elevation of Privilege Vulnerability

OpenText Documentum Content Server formerly known as EMC Documentum Content Server is a content management service system from OpenText Canada. The system is mainly used to manage the Documentum content repository, you can create, modify and track documents and other operations. An elevation of...

CVE-2017-15012

OpenText Documentum Content Server formerly EMC Documentum Content Server through 7.3 does not properly validate the input of the PUTFILE RPC-command, which allows any authenticated user to hijack an arbitrary file from the Content Server filesystem; because some files on the Content Server...

PT-2017-13817

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server versions prior to 7.3 Description The issue arises from improper input validation of the PUT FILE RPC-command, allowing any authenticated user to hijack an arbitrary file from the Content Server filesystem...