Vulnerability in Apache Tomcat
CVSS Skor
9.8
EPSS İhtimal
%99.3
Risk Skoru
19.5
Yayın
6 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)
Apache Tomcat - AJP 'Ghostcat File Read/Inclusion
Nuclei: Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability
Apache Tomcat AJP Ghostcat (CVE-2020-1938) exploit tool for file disclosure with multi-target scanning, custom wordlists, and upload point detection capabilities
Vulhub tomcat/CVE-2020-1938: Apache Tomcat AJP Ghostcat (CVE-2020-1938), run with Isoloom
CVE-2020-1938 (Ghostcat) Tomcat AJP file read/file include PoC with python3 port
CVE-2020-1938-Tomcat-AJP(Ghostcat)-Analysis
A fully refactored, Python 3 compatible exploit script for Tomcat Ghostcat (CVE-2020-1938 / CNVD-2020-10487) AJP Local File Inclusion
https://lists.apache.org/thread.html/rad36ec6a1ffc9e43266b030c22ceeea569243555d34fb4187ff08522%40%3Cnotifications.ofbiz.apache.org%3E
İlgili Benzer Açıklar
Improper input validation in Apache Log4j
Improper access control in N/a
struts2: RCE when performing file upload based on Jakarta Multipart parser
struts2: Using specific results and namespaces can result in a remote code execution
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
Improper authentication in Oracle Corporation Oracle Concurrent Processing
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-1938"