Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters: Are You at Risk?
By simply sending HTTP requests, attackers can trigger the deserialisation of malicious data in Tomcat's session storage and ...
Security Boulevard5d
One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild
A devastating new remote code execution (RCE) vulnerability, CVE-2025-24813, is now actively exploited in the wild. Attackers need just one PUT API request to take over vulnerable Apache Tomcat ...
Bleeping Computer2d
Critical RCE flaw in Apache Tomcat actively exploited in attacks
Specifically, the attacker sends a PUT request containing a base64-encoded serialized Java payload saved to Tomcat's session storage. The attacker then sends a GET request with a JSESSIONID cookie ...