⤷ Title: TryHackMe | Tomcat: CVE-2024-50379 | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Wed, 12 Mar 2025 22:06:33 GMT
════════════════════════
⌗ Tags: #tomcat #tryhackme #apache_tomcat #tryhackme_writeup #tryhackme_walkthrough
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Wed, 12 Mar 2025 22:06:33 GMT
════════════════════════
⌗ Tags: #tomcat #tryhackme #apache_tomcat #tryhackme_writeup #tryhackme_walkthrough
Medium
TryHackMe | Tomcat: CVE-2024-50379 | WriteUp
Explore and learn about the Tomcat CVE-2024–50379 vulnerability
⤷ Title: Tomcat Flaw CVE-2025-24813 Exploited in the Wild, PoC Released
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Mar 2025 01:59:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_24813 #CVE_2025_24813 PoC #PoC
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Mar 2025 01:59:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_24813 #CVE_2025_24813 PoC #PoC
Daily CyberSecurity
Tomcat Flaw CVE-2025-24813 Exploited in the Wild, PoC Released
Learn how CVE-2025-24813 PoC allows attackers to exploit Apache Tomcat servers through remote code execution. Stay informed!
⤷ Title: Remote code execution in Apache Tomcat (RCE)
════════════════════════
𐀪 Author: Kaique
════════════════════════
ⴵ Time: Fri, 28 Mar 2025 19:31:35 GMT
════════════════════════
⌗ Tags: #writeup #reverse_shell #rce_vulnerability #security_misconfiguration #apache_tomcat
════════════════════════
𐀪 Author: Kaique
════════════════════════
ⴵ Time: Fri, 28 Mar 2025 19:31:35 GMT
════════════════════════
⌗ Tags: #writeup #reverse_shell #rce_vulnerability #security_misconfiguration #apache_tomcat
Medium
😺 Remote code execution in Apache Tomcat (RCE)
Explorando falhas de configuração para obter acesso remoto ao servidor
⤷ Title: CISA Flags Apache Tomcat CVE-2025-24813 as Actively Exploited with 9.8 CVSS
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 02:00:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_24813
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 02:00:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_24813
Daily CyberSecurity
CISA Flags Apache Tomcat CVE-2025-24813 as Actively Exploited with 9.8 CVSS
CVE-2025-24813 vulnerability in Apache Tomcat, now actively exploited in the wild, has landed in the CISA Known Exploited Vulnerabilities Catalog
⤷ Title: Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 01:38:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_31650 #CVE_2025_31651 #Denial of Service #Java Servlet #Rewrite Rule Bypass #security update #vulnerability patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 01:38:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_31650 #CVE_2025_31651 #Denial of Service #Java Servlet #Rewrite Rule Bypass #security update #vulnerability patch
Daily CyberSecurity
Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws
Apache Tomcat patches CVE-2025-31650 and CVE-2025-31651 to fix denial of service and rewrite rule bypass issues. Upgrade now to stay secure.
⤷ Title: Apache Tomcat Flaw Allows Security Bypass on Case-Insensitive Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:52:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CGI servlet #macOS #security bypass #web server #windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:52:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CGI servlet #macOS #security bypass #web server #windows
Daily CyberSecurity
Apache Tomcat Flaw Allows Security Bypass on Case-Insensitive Systems
A low-severity flaw in Apache Tomcat (CVE-2025-46701) allows security constraint bypass via crafted URLs on case-insensitive file systems. Update now!
⤷ Title: Critical Flaws in Veritas DLO Expose Systems to Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:26:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #apache Tomcat #CISA KEV #cybersecurity #data backup #endpoint protection #rce #Remote Code Execution #Veritas DLO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:26:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #apache Tomcat #CISA KEV #cybersecurity #data backup #endpoint protection #rce #Remote Code Execution #Veritas DLO
Daily CyberSecurity
Critical Flaws in Veritas DLO Expose Systems to Remote Code Execution
Veritas DLO has critical vulnerabilities (CVE-2024-38475, CVE-2025-24813) in bundled Apache components, leading to RCE. Upgrade immediately to prevent exploitation.
⤷ Title: Apache Tomcat Under Attack: Massive Brute-Force Campaign Targets Manager Interfaces
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 02:08:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #Brute Force #cyberattack #cybersecurity #DigitalOcean #GreyNoise #Login Attempts #Tomcat Manager #Web Security #web server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 02:08:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #Brute Force #cyberattack #cybersecurity #DigitalOcean #GreyNoise #Login Attempts #Tomcat Manager #Web Security #web server
Daily CyberSecurity
Apache Tomcat Under Attack: Massive Brute-Force Campaign Targets Manager Interfaces
GreyNoise reports a massive brute-force campaign targeting Apache Tomcat Manager interfaces, with hundreds of malicious IPs attempting to compromise services.
⤷ Title: Apache Tomcat Patches 4 Flaws: DoS, Privilege Bypass, & Installer Risks Addressed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:19:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2025_48976 #CVE_2025_48988 #CVE_2025_49124 #CVE_2025_49125 #Denial of Service #dos #Installer #java #Privilege Bypass #Vulnerability #web server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:19:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2025_48976 #CVE_2025_48988 #CVE_2025_49124 #CVE_2025_49125 #Denial of Service #dos #Installer #java #Privilege Bypass #Vulnerability #web server
Daily CyberSecurity
Apache Tomcat Patches 4 Flaws: DoS, Privilege Bypass, & Installer Risks Addressed
Apache Tomcat patched four vulnerabilities affecting versions 9.0, 10.1, and 11.0, ranging from DoS to privilege bypass. Update immediately
⤷ Title: Apache Under Attack: Critical RCE Flaws in Tomcat & Camel Spark Thousands of Exploit Attempts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:39:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #apache Tomcat #CVE_2025_24813 #CVE_2025_27636 #CVE_2025_29891 #cybersecurity #Palo Alto Networks #rce #Remote Code Execution #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:39:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #apache Tomcat #CVE_2025_24813 #CVE_2025_27636 #CVE_2025_29891 #cybersecurity #Palo Alto Networks #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
Apache Under Attack: Critical RCE Flaws in Tomcat & Camel Spark Thousands of Exploit Attempts
Palo Alto Networks reveals thousands of exploit attempts targeting RCE flaws in Apache Tomcat (CVE-2025-24813) and Apache Camel (CVE-2025-27636, CVE-2025-29891).
⤷ Title: Apache Tomcat Patches Trio of Denial-of-Service Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:29:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #APR #Denial of Service #dos #file upload #HTTP/2 #Multipart #web server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:29:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #APR #Denial of Service #dos #file upload #HTTP/2 #Multipart #web server
Daily CyberSecurity
Apache Tomcat Patches Trio of Denial-of-Service Flaws
Apache Tomcat 9.0.107 patches three critical DoS flaws (CVE-2025-52434, CVE-2025-52520, CVE-2025-53506) that can disrupt web services via HTTP/2, file uploads, and excessive streams.
⤷ Title: Apache Tomcat webshell application for RCE
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 15:47:42 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Apache Tomcat webshell
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 15:47:42 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Apache Tomcat webshell
Penetration Testing Tools
Apache Tomcat webshell application for RCE
Apache Tomcat webshell application for RCE is a webshell application and interactive shell for pentesting Apache Tomcat servers.
⤷ Title: Patch Now: Apache Tomcat Fixes Session Fixation and ‘MadeYouReset’ Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 Aug 2025 00:17:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_48989 #CVE_2025_55668 #dos #MadeYouReset #security update #Session Fixation #web server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 Aug 2025 00:17:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_48989 #CVE_2025_55668 #dos #MadeYouReset #security update #Session Fixation #web server
Daily CyberSecurity
Patch Now: Apache Tomcat Fixes Session Fixation and 'MadeYouReset' Flaws
Apache Tomcat has released updates for two serious flaws: a session fixation vulnerability and a "MadeYouReset" DoS vulnerability affecting multiple versions.
⤷ Title: Apache Tomcat Patches URL Rewrite Bypass (CVE-2025-55752) Risking RCE and Console ANSI Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 01:43:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ANSI Escape #apache Tomcat #CVE_2025_55752 #Denial of Service #rce #URL Rewrite Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 01:43:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ANSI Escape #apache Tomcat #CVE_2025_55752 #Denial of Service #rce #URL Rewrite Bypass
Daily CyberSecurity
Apache Tomcat Patches URL Rewrite Bypass (CVE-2025-55752) Risking RCE and Console ANSI Injection
The Apache Software Foundation has released multiple security patches for Apache Tomcat, addressing three newly disclosed vulnerabilities — CVE-2025-55752, CVE-2025-55754, and CVE-2025-61795 — aff…
⤷ Title: Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 05:58:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2025_66614 #CVE_2026_24733 #CVE_2026_24734 #Cyber Security #HTTP/0.9 #infosec #Patch Alert #SNI Bypass #Web Server Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 05:58:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2025_66614 #CVE_2026_24733 #CVE_2026_24734 #Cyber Security #HTTP/0.9 #infosec #Patch Alert #SNI Bypass #Web Server Security
Daily CyberSecurity
Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
Apache Tomcat rolls out urgent updates for versions 9, 10, and 11 to fix legacy HTTP/0.9 protocol confusion and SNI certificate bypass flaws. Patch now.
⤷ Title: From Vulnerability to Resilience: Hardening an Apache Tomcat Server (Hands-on Security Walkthrough)
════════════════════════
𐀪 Author: Umeshpandeybtech
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:34:00 GMT
════════════════════════
⌗ Tags: #application_security #apache_tomcat_security #penetration_testing #web_server_hardening #cybersecurity
════════════════════════
𐀪 Author: Umeshpandeybtech
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:34:00 GMT
════════════════════════
⌗ Tags: #application_security #apache_tomcat_security #penetration_testing #web_server_hardening #cybersecurity
Medium
From Vulnerability to Resilience: Hardening an Apache Tomcat Server (Hands-on Security Walkthrough)
🧠 Why This Matters
⤷ Title: [Thompson] — Exploitation of Apache Tomcat Default Credentials Leading to RCE and Cron-Based…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:46:44 GMT
════════════════════════
⌗ Tags: #rce #crontab #privilege_escalation #apache_tomcat #bug_bounty
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:46:44 GMT
════════════════════════
⌗ Tags: #rce #crontab #privilege_escalation #apache_tomcat #bug_bounty
Medium
[Thompson] — Exploitation of Apache Tomcat Default Credentials Leading to RCE and Cron-Based Privilege Escalation
From exposed Tomcat manager access to root shell via crontab.