CVE-2025-24813

Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...

CVE-2017-12615-Home-Lab

ENGLISH BELOW CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload Lab นี้จำลองช่องโหว่ CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload เกิดจากการตั้งค่า readonly=false ทำให้สามารถอัปโหลดไฟล์ผ่าน HTTP PUT ได้ รวมถึงไฟล์ .jsp ที่สามารถรันคำสั่ง RCE Features Apache Tomcat 7.0.79...

put2win

put2win Script to automate PUT HTTP method exploitation to get shell. Installation git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh Usage Script to automate PUT HTTP method exploitation to get shell. Options: -t TARGET Target URL/IP e.g. 192.168.1.10 -p PORT Target...

OpenMetaData - SpEL Injection in PUT /api/v1/policies

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. CompiledRule::validateExpression is also called from PolicyRepository.prepare. prepare is called from...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 Этот репозиторий содержит yaml-шаблон для сканирования сервиса на предмет уязвимости CVE-2025-24813 без нарушения работы сервера и без нанесения какого-либо ущерба с использованием сканера уязвимостей nuclei. CVE-2025-24813 CVE-2025-24813 — это уязвимость в веб-сервере Apach...

lazyCSRF

LazyCSRF LazyCSRF is a more useful CSRF PoC generator that runs on Burp Suite. No longer maintenance🙇 When I started developing lazyCSRF, I mistakenly thought that the CSRF PoC generator built into Burp Professional could not generate PoC using XHR and did not support PUT requests, etc. I am stil...

Hoverfly < 1.10.3 - Arbitrary File Read

Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The /api/v2/simulation POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary...

Apache Tomcat 11.0.2 Vulnerability Scanner

Apache Tomcat versions 9.0.0 through 9.0.98, 10.1.0 through 10.1.34, and 11.0.0 through 11.0.2 may allow remote code execution when partial PUT and persistent sessions are enabled. The supplied Nuclei template identifies affected versions and tests partial PUT support...

CVE-2025-24813-POC

CVE-2025-24813 Proof-of-Concept автономный Этот репозиторий содержит неразрушающий автономный PoC для CVE-2025-24813 — уязвимости в Apache Tomcat 9.0.55, позволяющей удалённую загрузку файлов через частичные PUT-запросы. Эксплойт демонстрирует выполнение кода путём загрузки и доступа к безобидном...

CVE-2020-13768

🐞 CVE-2020-13768: MiniShare 1.4.1 - Stack-Based Buffer Overflow Stack-based buffer overflow in MiniShare 1.4.1 reachable through a single HTTP PUT request. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context and affected software About the vulnerability...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve를 통한 디렉터리 보호 우회 → PUT 기반 RCE🚨🚨 요약 CVE-2025-55752는 버그 60013을 수정하는 과정에서 Apache Tomcat에 도입된 보안 회귀regression입니다. Rewrite Valve가 사용될 때 Tomcat은 URL 디코딩 전에 경로 정규화path normalization를 적용합니다. 이 잘못된 순서로 인해 조작된 URI가 /WEB-INF/ 및 /META-INF/와 같은 보호 경로에 대해...

cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE Field| Value ---|--- CVE ID| CVE-2025-43564 CVSS Score| 9.8 CRITICAL Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-494 — Download of Code Without Integrity Check Exploitation| Confirmed in the wild within one week of disclosur...

Tomcat_PUT_GUI_EXP

TomcatPUTEXPV1.4 Tomcat PUT Method Arbitrary File Write CVE-2017-12615 Graphical Exploitation Tool Vulnerability Introduction On September 19, 2017, Apache Tomcat officially confirmed and fixed two high-risk vulnerabilities, with CVE IDs: CVE-2017-12615 and CVE-2017-12616. Among them, the remote...

CVE-2025-24813

Description This repository is an environment for reproducing the latest RCE of CVE-2025-24813 Tomcat. For learning and research purposes only! Exploitation Conditions The application has enabled the DefaultServlet write functionality, which is disabled by default. The application supports partia...

Tomcat-CVE_2025_24813

Tomcat CVE-2025-24813 playground Exploit was forked from https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md did not work for me Content 1. ROOT.war is a minimal app with one servlet including apache-common-3.1 and spawing a session 2. ysoserial.jar taken original from ysoserial...

CVE-2025-24813-PoC-exploit

CVE-2025-24813-PoC-exploit Apache Tomcat Deserialization RCE ❯ python3 exploit.py http://localhost:8080/ "id" ============================================================ CVE-2025-24813 - Apache Tomcat Partial PUT RCE ============================================================ Target:...

cve-2019-6715

cve-2019-6715 Shout out to TomNomNom for 99.9% of his code.... Build go get github.com/fatih/color go build Usage cat list.txt | ./2019-6715 All vuln urls are logged in text.log CVE 2019-6715 Description: pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers ...

BIT-RABBITMQ-2026-67408 RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/vhost/name reques...

CVE-2023-3722

CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device Services Unrestricted File Upload RCE. This script will use a PUT request to upload a php file with an eight-digit randomly generated filename. Then it will make a GET request to retrieve this file and parse the output to get the comman...

Rocky Linux 10.0 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc (crlsa-2025_7494)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257494 advisory. tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT CVE-2025-24813 Tenable has extracted the preceding description...