CVE Listesine Dön
CVE-2024-50379Kavram kanıtı (PoC) yayınlanmış · CISAOtomatik saldırıya uygun · CISA

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

CVSS Skor

9.8

EPSS İhtimal

%31.8

Risk Skoru

3.1

Yayın

1 yıl önce

Overview (Genel Bakış)Public Exploits (15)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
SleepingBag945/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★4)

Public PoCKaynak güncellemesi: 23.12.2024 17:20:38
G
iSee857/CVE-2024-50379-PoC
GitHub

Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本 (★2)

Public PoCKaynak güncellemesi: 20.12.2024 15:29:36
G
ph0ebus/Tomcat-CVE-2024-50379-Poc
GitHub

RCE through a race condition in Apache Tomcat (★1)

Public PoCKaynak güncellemesi: 21.12.2024 17:57:38
G
dragonked2/CVE-2024-50379-POC
GitHub

This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either unprotected or not present on the target server. (★1)

Public PoCKaynak güncellemesi: 26.12.2024 04:01:14
G
JFOZ1010/Nuclei-Template-CVE-2024-50379
GitHub

Repositorio para alojar un template de Nuclei para probar el CVE-2024-50379 (en fase de prueba) (★0)

Public PoCKaynak güncellemesi: 20.12.2024 12:54:32
G
Alchemist3dot14/CVE-2024-50379
GitHub

CVE-2024-50379 is a critical vulnerability affecting multiple versions of Apache Tomcat, an open source web server and servlet container widely used for deploying Java-based web applications. The vulnerability arises from a Time-of-Use (TOCTOU) race condition that occurs when compiling JavaServer Pages (JSPs). (★0)

Public PoCKaynak güncellemesi: 21.12.2024 06:55:35
G
dear-cell/CVE-2024-50379
GitHub

CVE-2024-50379利用 (★0)

Public PoCKaynak güncellemesi: 23.12.2024 23:13:15
G
lizhianyuguangming/CVE-2024-50379-exp
GitHub

CVE-2024-50379-exp (★0)

Public PoCKaynak güncellemesi: 25.12.2024 11:43:51
G
bigb0x/CVE-2024-50379
GitHub

Testing the latset Apache Tomcat CVE-2024-50379 Vuln (★0)

Public PoCKaynak güncellemesi: 26.12.2024 06:51:40
G
dkstar11q/CVE-2024-50379-nuclei
GitHub

Testing the latset Apache Tomcat CVE-2024-50379 Vuln (★0)

Public PoCKaynak güncellemesi: 26.12.2024 09:18:56
G
gomtaengi/CVE-2024-50379-exp
GitHub

CVE-2024-50379-exp (★0)

Public PoCKaynak güncellemesi: 28.12.2024 15:03:49
G
pwnosec/CVE-2024-50379
GitHub

ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the /uploads directory is either unprotected or missing on the target server. (★0)

Public PoCKaynak güncellemesi: 23.01.2025 20:40:30
G
paltrybelly/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★0)

Public PoCKaynak güncellemesi: 27.02.2025 01:28:04
G
shoddykilom/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★0)

Public PoCKaynak güncellemesi: 04.03.2025 07:22:59
G
unkemptpanc/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★0)

Public PoCKaynak güncellemesi: 11.03.2025 01:44:23

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-50379"