his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.
☆195Mar 14, 2025Updated last year
Alternatives and similar repositories for POC-CVE-2025-24813
Users that are interested in POC-CVE-2025-24813 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Apache Tomcat 远程代码执行漏洞批量检测脚本(CVE-2025-24813)☆98Apr 2, 2025Updated last year
- ☆41Mar 12, 2025Updated last year
- ☆267Jul 8, 2025Updated last year
- PoC Exploit for the NTLM reflection SMB flaw.☆720Feb 18, 2026Updated 7 months ago
- Unauthenticated Python PoC for CVE-2025-20281 RCE against ISE ERS API☆21Jul 28, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File☆409Mar 20, 2025Updated last year
- Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!☆158Jun 5, 2025Updated last year
- Proof of concept for CVE-2024-23897: Jenkins arbitrary file read☆46Sep 24, 2026Updated 3 weeks ago
- CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overfl…☆53Jan 11, 2025Updated last year
- CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash ar…☆37Feb 11, 2026Updated 8 months ago
- Proof-of-Concept for Authorization Bypass in Next.js Middleware☆20Mar 23, 2025Updated last year
- CVE-2025-1974☆91Apr 2, 2025Updated last year
- poc for CVE-2025-14847☆26Dec 26, 2025Updated 9 months ago
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This tool exploits Golden DMSA attack against delegated Managed Service Accounts.☆98Jul 15, 2025Updated last year
- CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction dir…☆19Jul 10, 2025Updated last year
- LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113☆516Jan 2, 2025Updated last year
- PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Iv…☆49Jan 16, 2025Updated last year
- SharePoint WebPart Injection Exploit Tool☆316Nov 28, 2025Updated 10 months ago
- A fast WordPress plugin enumeration tool☆961Updated this week
- AD CS exploitation related stuff goes here☆40Mar 23, 2026Updated 6 months ago
- CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2☆142Aug 2, 2025Updated last year
- cve-2025-24813验证脚本☆11Mar 14, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Proof of concept & details for CVE-2025-21298☆197Jan 20, 2025Updated last year
- FortiWeb CVE-2025-25257 exploit☆64Jul 11, 2025Updated last year
- CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP☆24May 11, 2025Updated last year
- HITCON 2024 x DEVCORE Wargame☆31Aug 30, 2024Updated 2 years ago
- CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE☆18Apr 17, 2025Updated last year
- CVE-2025-24813利用工具☆16Mar 16, 2025Updated last year
- Scans WordPress sites to find unclaimed plugin slugs on the public directory.☆27Oct 12, 2025Updated last year
- React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)☆266Dec 12, 2025Updated 10 months ago
- CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution☆33Jan 13, 2026Updated 9 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC☆322Jun 22, 2024Updated 2 years ago
- A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnera…☆428Dec 16, 2025Updated 10 months ago
- ☆39Dec 14, 2024Updated last year
- Apache Tomcat - Remote Code Execution via Session Deserialization (CVE-2025-24813)☆19May 25, 2025Updated last year
- CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices☆50Jul 8, 2025Updated last year
- Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote cod…☆14Jul 2, 2024Updated 2 years ago
- Scan websites for exposed Supabase JWTs, enumerate accessible tables, and detect sensitive data exposure automatically.☆126Dec 29, 2025Updated 9 months ago