{"vulnerability": "CVE-2017-1261", "sightings": [{"uuid": "3f2d4fda-26be-41ea-a72c-a3dc6a39c00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "MISP/5c0fd6cc-f868-4dca-890c-1ea30a021402", "content": "", "creation_timestamp": "2018-12-11T15:50:28.000000Z"}, {"uuid": "71cfd7e9-fe4e-470e-9954-3b20df0aebbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "MISP/5df74123-1020-46ef-9504-7c5c0a3b4631", "content": "", "creation_timestamp": "2019-12-16T08:33:51.000000Z"}, {"uuid": "be07af2e-8ab1-4068-8ac5-8442670aa9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "MISP/22202ca2-acd7-409f-b572-f1d81bd91c48", "content": "", "creation_timestamp": "2020-10-09T15:54:21.000000Z"}, {"uuid": "947b3f93-6796-43c2-9287-4cdd927225c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/9a9801da-049b-4458-ab1c-7a892d5feb76", "content": "", "creation_timestamp": "2020-10-09T15:24:13.000000Z"}, {"uuid": "0a45a0f9-3b0c-40f9-94ac-e37ad933d81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "MISP/e21d087e-3787-4018-b59b-53c93aaa07a1", "content": "", "creation_timestamp": "2020-10-09T15:22:44.000000Z"}, {"uuid": "36a8be7d-d4e0-4436-b6f5-bc77481f900d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "MISP/884ceafb-af27-42e9-8d79-e9b6ce930532", "content": "", "creation_timestamp": "2020-10-09T15:10:38.000000Z"}, {"uuid": "9f7a4eae-6cd7-4c34-a8b3-c20f9e8e02f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "19d7d6d3-cac5-46c2-ab1e-8017c5c05d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "ed8d524b-1f64-438f-a221-601cc60ceb01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12611", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44556", "content": "", "creation_timestamp": "2017-09-08T00:00:00.000000Z"}, {"uuid": "cb0d92b2-5ed8-48a0-b8d9-0f6af8346d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://www.exploit-db.com/exploits/42966", "content": "", "creation_timestamp": "2017-10-09T00:00:00.000000Z"}, {"uuid": "409c1aef-a28f-4106-b7d5-316af86df245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43008", "content": "", "creation_timestamp": "2017-10-17T00:00:00.000000Z"}, {"uuid": "c62d20be-ca28-4753-ba3b-e60fc0801b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971418", "content": "", "creation_timestamp": "2024-12-24T20:29:02.262358Z"}, {"uuid": "05843c33-3801-460b-ad51-169b524f5a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971419", "content": "", "creation_timestamp": "2024-12-24T20:29:03.273805Z"}, {"uuid": "b0db57dc-1091-4d04-8d66-4dfffc5f5429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "dfbc6f41-0cae-499e-8def-0dbd4968b34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-23)", "content": "", "creation_timestamp": "2024-12-23T00:00:00.000000Z"}, {"uuid": "807442c7-5c6a-4241-8a18-40712bb497d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-26)", "content": "", "creation_timestamp": "2024-12-26T00:00:00.000000Z"}, {"uuid": "a97d1f72-c6fd-4c30-a242-7c95ac733291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-25)", "content": "", "creation_timestamp": "2024-12-25T00:00:00.000000Z"}, {"uuid": "99b3904d-1c31-4aef-bc4c-fd6608e98eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-29)", "content": "", "creation_timestamp": "2024-12-29T00:00:00.000000Z"}, {"uuid": "e672981d-5fec-49c5-98d1-47a9be442026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-06)", "content": "", "creation_timestamp": "2025-01-06T00:00:00.000000Z"}, {"uuid": "e2d30c89-9b36-4a83-8a1b-5a4b469dddb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-08)", "content": "", "creation_timestamp": "2025-01-08T00:00:00.000000Z"}, {"uuid": "daaddfd2-0a24-4abb-a30f-015d1ee2db51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-16)", "content": "", "creation_timestamp": "2024-12-16T00:00:00.000000Z"}, {"uuid": "59b22cc3-759b-4fd6-8249-1bb11305670a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-18)", "content": "", "creation_timestamp": "2024-12-18T00:00:00.000000Z"}, {"uuid": "72549cbb-3411-4331-99a3-c2426cae089a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:53.000000Z"}, {"uuid": "01f44321-66aa-4bca-9df5-751f3a853d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "content": "", "creation_timestamp": "2025-02-24T00:00:00.000000Z"}, {"uuid": "426f8256-c558-44f3-b746-7db21b727baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-24)", "content": "", "creation_timestamp": "2025-02-24T00:00:00.000000Z"}, {"uuid": "ad04df13-0369-4e5e-b3ae-d6f5ca384e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2017-12615", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3lkg3qjbr7bd2", "content": "", "creation_timestamp": "2025-03-15T12:09:28.786857Z"}, {"uuid": "23c3f9a8-6fdd-464e-8650-9a03773bb200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-20)", "content": "", "creation_timestamp": "2025-02-20T00:00:00.000000Z"}, {"uuid": "b65367cf-d0d8-4a74-ae6c-4fd2b24f0df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:15.000000Z"}, {"uuid": "42409d96-0c94-4402-b1cf-ee88b45b63ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:15.000000Z"}, {"uuid": "ab2d864c-4982-42af-b657-2ae43413ce25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-16)", "content": "", "creation_timestamp": "2025-11-16T00:00:00.000000Z"}, {"uuid": "08fabc1d-99c5-408a-9724-95c92d70282a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "4d40c7a9-cb07-4555-8774-fc5932924000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:06.000000Z"}, {"uuid": "22efc2ef-4ef7-447e-9065-2aec680f0a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "7f8f17db-5d03-4614-ac8a-e62f5def8ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-15)", "content": "", "creation_timestamp": "2025-12-15T00:00:00.000000Z"}, {"uuid": "677ce6e0-98b7-40a1-92a0-47f7b1db560f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "content": "", "creation_timestamp": "2025-12-29T00:00:00.000000Z"}, {"uuid": "95715f19-76dd-4d69-827c-fd0c66914a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://gist.github.com/aamixsh/3d5e1cb8dc17415acad151adc9c11e61", "content": "", "creation_timestamp": "2026-03-05T02:40:03.000000Z"}, {"uuid": "28784cf2-f2cb-4b6d-99bd-548eb8df87b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12611", "type": "seen", "source": "https://gist.github.com/winterswang/4908fd900e5f5a047bafb32001894038", "content": "", "creation_timestamp": "2026-03-11T04:03:33.000000Z"}, {"uuid": "815239f6-1ffd-48c0-a473-ee122e4f480a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/237de4c3-2f15-4414-af25-7ea9c72c6e04", "content": "", "creation_timestamp": "2026-02-02T12:28:03.371040Z"}, {"uuid": "22551bc5-21c8-488d-be2a-1e4f4426c79b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cd55b5b8-d66d-4908-9d35-fee03a2ce3e8", "content": "", "creation_timestamp": "2026-02-02T12:28:03.475778Z"}, {"uuid": "f5ccc8c2-07bf-42e2-abb6-05e6999ae001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3meaxbnbibwr2", "content": "", "creation_timestamp": "2026-02-07T08:01:47.387451Z"}, {"uuid": "92577a96-9865-4774-928a-b1280817f01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3meaxbnbibwr2", "content": "", "creation_timestamp": "2026-02-07T08:01:47.483257Z"}, {"uuid": "a7c97060-852d-4f99-b86f-8327a1aab77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-07)", "content": "", "creation_timestamp": "2026-02-07T00:00:00.000000Z"}, {"uuid": "e8234e10-b70b-464e-8c63-01fc1252832c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cd55b5b8-d66d-4908-9d35-fee03a2ce3e8", "content": "", "creation_timestamp": "2026-02-02T12:28:03.475778Z"}, {"uuid": "ec8a647d-289a-4be5-accc-d2bef8971fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/237de4c3-2f15-4414-af25-7ea9c72c6e04", "content": "", "creation_timestamp": "2026-02-02T12:28:03.371040Z"}, {"uuid": "942bd18d-16c7-4ec1-8398-910c4c7f0289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "Telegram/0RRAbSvsgLzYe1FKfBU6ATvqxF6wYAFGvBfk8O-WmecysoY", "content": "", "creation_timestamp": "2025-06-21T15:00:06.000000Z"}, {"uuid": "b7f4cc94-5c32-41a2-a9be-21b00103acf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/rce/apache_tomcat_cve_2017_12617", "content": "", "creation_timestamp": "2024-12-10T10:34:13.000000Z"}, {"uuid": "42f0f4f5-f55c-4c4a-885f-ad28daf19f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "Telegram/cXGJKAtM4hUs9woTQlzEUCh6Ji7hbJ9irNNz-IXtpxYJiW8", "content": "", "creation_timestamp": "2025-11-17T21:00:05.000000Z"}, {"uuid": "8962142a-0e9c-4e9d-9239-212ea0571e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://t.me/GithubRedTeam/91799", "content": "", "creation_timestamp": "2026-07-13T22:00:13.565574Z"}, {"uuid": "5e0faae4-276c-47a0-88c4-45f243af58cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8487", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1agetshell\n\u63cf\u8ff0\uff1a\u6700\u65b0tomcat\u81ea\u52a8\u5316\u6f0f\u6d1e\u626b\u63cf\u5229\u7528\u5de5\u5177\uff0c\u652f\u6301\u6279\u91cf\u5f31\u53e3\u4ee4\u68c0\u6d4b\u3001\u540e\u53f0\u90e8\u7f72war\u5305getshell\u3001CVE-2017-12615 \u6587\u4ef6\u4e0a\u4f20\u3001CVE-2020-1938/CNVD-2020-10487 \u6587\u4ef6\u5305\u542b\nURL\uff1ahttps://github.com/lizhianyuguangming/TomcatScanPro\n\n\u6807\u7b7e\uff1a#getshell", "creation_timestamp": "2024-09-09T02:26:19.000000Z"}, {"uuid": "84588d62-4811-4d76-b073-44510f54283a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "Telegram/V8L4iAwWK0tUU82GBf6pQcYd5tn98MzDFAyp3TL-Sg99oMc", "content": "", "creation_timestamp": "2025-11-07T21:00:04.000000Z"}, {"uuid": "3e5cdc94-b39b-4897-921e-0368e8d431b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "Telegram/I3J5qCH_JKCFSOMGFBcX6SqAo4S1Q6VOiRpHJLugpWkBKm3P", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "66b0383c-afe1-47c5-8d98-71f4c5052fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12611", "type": "published-proof-of-concept", "source": "Telegram/nw0z0f1QUh2Gwc5CcjMpvmtool72fRsSPRhsWnP2H-fH7tw", "content": "", "creation_timestamp": "2025-09-24T21:00:05.000000Z"}, {"uuid": "37a9d8af-6f9a-4fa9-9cbf-6bafcb9e1ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12611", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52916", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aRCE project\nURL\uff1ahttps://github.com/zeynepsilao/CVE-2017-12611_Exploit\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-09-24T13:49:18.000000Z"}, {"uuid": "ece81b06-048b-4bd7-ab70-4686d449be7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1796", "content": "POC CVE-2017-12615\nPOC \u0434\u043b\u044f Apache Tomcat 7.0.0 - 7.0.79 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows; \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2017-12615 PUT JSP.\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n\u041f\u043e \u0437\u0430\u043c\u044b\u0441\u043b\u0443, \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Apache Tomcat \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b JSP \u043c\u0435\u0442\u043e\u0434\u043e\u043c PUT. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u0435\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0434\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 JSP \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 7.0.{0 - 79} \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Tomcat, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d PUT, \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0432 \u043c\u0435\u0442\u043e\u0434 PUT \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Tomcat \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u041d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e? \u041f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430.\n\n\u041c\u0435\u0442\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430:\n\u0414\u043e\u0431\u0430\u0432\u0438\u0432 \u0441\u0438\u043c\u0432\u043e\u043b '/' \u0437\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u0444\u0430\u0439\u043b\u0430, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430. \u0412\u043e\u0442 \u0438 \u0432\u0441\u0435. \u0412 \u043e\u0431\u0449\u0435\u043c, \u043d\u0438\u0447\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0433\u043e.\n\nhttps://github.com/breaktoprotect/CVE-2017-12615\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-06-22T13:01:11.000000Z"}, {"uuid": "e23b4b6e-be53-4c75-aecb-46e437317453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/poxek/2400", "content": "#CVE\n\nApache Tomcat RCE\nCVE-2017-12617\n\naffect systems with HTTP PUTs enabled (via setting the \"read-only\" initialization parameter of the Default servlet to \"false\") are affected.", "creation_timestamp": "2022-08-29T19:00:04.000000Z"}, {"uuid": "c5179940-be7f-4587-8a40-72ee9628157f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://t.me/GithubRedTeam/91799", "content": "", "creation_timestamp": "2026-07-14T00:00:21.493141Z"}, {"uuid": "81f862ca-d1fc-4cbc-a8d5-7cfdd4f0aacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://t.me/Ninjutsu_os/134", "content": "\ud83d\udd30Ninjutsu OS Info \ud83d\udd30  \n\n\nWe added 40 Nmap Scripting Engine (NSE) to Ninjutsu OS\n\nAxis_vuln_webcam\ncisco-asa-scan\nhttp-middleware-path-finder\nCVE-2018-13379\ncisco-cve-2019-1937\nhttp-pulse_ssl_vpn\nCVE-2018-20377\ncitrix\nhttp-screenshot\nphpadmin\nCVE-2018-4407\nclickjacking-prevent-check\nhttp-shellshock\nsmb-vuln-cve-2020-0796\nCVE-2018-7600_drupalgeddon\ncve_2019_1653\nhttp-vuln-CVE-2019-16759\ntomcat-cve-2017-12615\nCVE-2019-19781\ndlink-cve-2019-13101\nhttp-vuln-cve2017-18195\ntraversal\nCVE-2020-0796\ndocker_daemontcp\nhttp-waf-test\nvxworks_urgent11\nIIS-CVE-2010-2731\nfile-checker\nhttpcs_docker-daemontcp-prod\nweblogic-CNVD-C-2019-48814\nMS15-034\nfreevu\narch\nhydra\nweblogic-cve-2018-2894\nabb-cve-2019-7226\nhttp-lfi\ninfiltrator\nwinVulnDetection", "creation_timestamp": "2020-05-12T13:27:31.000000Z"}, {"uuid": "af03aef9-b2aa-4978-a8a2-91d99b09813d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://t.me/Ninjutsu_os/739", "content": "\ud83d\udd30Ninjutsu OS Info \ud83d\udd30  \n\n\nWe added 40 Nmap Scripting Engine (NSE) to Ninjutsu OS\n\nAxis_vuln_webcam\ncisco-asa-scan\nhttp-middleware-path-finder\nCVE-2018-13379\ncisco-cve-2019-1937\nhttp-pulse_ssl_vpn\nCVE-2018-20377\ncitrix\nhttp-screenshot\nphpadmin\nCVE-2018-4407\nclickjacking-prevent-check\nhttp-shellshock\nsmb-vuln-cve-2020-0796\nCVE-2018-7600_drupalgeddon\ncve_2019_1653\nhttp-vuln-CVE-2019-16759\ntomcat-cve-2017-12615\nCVE-2019-19781\ndlink-cve-2019-13101\nhttp-vuln-cve2017-18195\ntraversal\nCVE-2020-0796\ndocker_daemontcp\nhttp-waf-test\nvxworks_urgent11\nIIS-CVE-2010-2731\nfile-checker\nhttpcs_docker-daemontcp-prod\nweblogic-CNVD-C-2019-48814\nMS15-034\nfreevu\narch\nhydra\nweblogic-cve-2018-2894\nabb-cve-2019-7226\nhttp-lfi\ninfiltrator\nwinVulnDetection", "creation_timestamp": "2020-05-12T13:27:34.000000Z"}, {"uuid": "b405aedf-2d7c-49bf-a1e6-a7decc195928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12616", "type": "seen", "source": "https://t.me/arpsyndicate/1483", "content": "#ExploitObserverAlert\n\nCVE-2017-12616\n\nDESCRIPTION: Exploit Observer has 28 entries related to CVE-2017-12616. When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.\n\nFIRST-EPSS: 0.936290000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-06T12:45:10.000000Z"}, {"uuid": "ea0d7ec2-731f-46f4-840d-79b27436f599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-1261", "type": "seen", "source": "https://t.me/arpsyndicate/1878", "content": "#ExploitObserverAlert\n\nCVE-2017-1261\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2017-1261. IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 124736.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 1.4\nNVD-ES: 1.8", "creation_timestamp": "2023-12-18T01:09:23.000000Z"}, {"uuid": "e22de30b-274b-4729-ad53-f3c35622dc4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/arpsyndicate/1300", "content": "#ExploitObserverAlert\n\nCVE-2017-12617\n\nDESCRIPTION: Exploit Observer has 132 entries related to CVE-2017-12617. When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.\n\nFIRST-EPSS: 0.974700000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-04T20:41:30.000000Z"}, {"uuid": "3f648004-b289-4ca0-a6a8-d49d9a04326d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://t.me/arpsyndicate/1230", "content": "#ExploitObserverAlert\n\nCVE-2017-12615\n\nDESCRIPTION: Exploit Observer has 99 entries related to CVE-2017-12615. When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.\n\nFIRST-EPSS: 0.969230000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-04T14:45:13.000000Z"}, {"uuid": "ab5009bd-2195-4ccf-87fc-aa139383d399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12611", "type": "seen", "source": "https://t.me/arpsyndicate/256", "content": "#ExploitObserverAlert\n\nCVE-2017-12611\n\nDESCRIPTION: Exploit Observer has 27 entries related to CVE-2017-12611. In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack.\n\nFIRST-EPSS: 0.973580000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-17T10:23:53.000000Z"}, {"uuid": "a3faf5fd-7921-46f1-800c-84703d28fc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/arpsyndicate/1505", "content": "#ExploitObserverAlert\n\nCVE-2017-12617\n\nDESCRIPTION: Exploit Observer has 132 entries related to CVE-2017-12617. When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.\n\nFIRST-EPSS: 0.974700000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-06T15:43:10.000000Z"}, {"uuid": "64121206-5ed6-4368-8593-d66ca67ec2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "Telegram/sQWWAbPQln1mhAoxoxZK8KQRUx1HB63SmzdtVeH38VLUnWo", "content": "", "creation_timestamp": "2025-04-29T23:00:05.000000Z"}, {"uuid": "b87cb03d-5064-43fe-bd64-a3af039c542c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12611", "type": "seen", "source": "https://t.me/true_secator/2035", "content": "\u200b\u200b\u0410\u0434\u043c\u0438\u043d\u0430\u043c \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443! \n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u043d\u0435 \u0437\u043d\u0430\u043b\u0438 \u0447\u0435\u043c \u0441\u0435\u0431\u044f \u0437\u0430\u043d\u044f\u0442\u044c \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0431\u0443\u0434\u043d\u0438, \u0442\u043e \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0435\u0432\u0438\u0437\u0438\u044e \u0441\u0435\u0442\u0435\u0439 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Trend Micro \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438\u0437 \u0422\u041e\u041f-15 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux:\n\n- CVE-2017-9805: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 REST \u0434\u043b\u044f Apache Struts 2, XStream RCE.\n- CVE-2018-7600: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Drupal Core RCE.\n- CVE-2020-14750: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Oracle WebLogic Server RCE.\n- CVE-2020-25213: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WordPress File Manager (wp-file-manager).\n- CVE-2020-17496: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432  \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 vBulletin subwidgetConfig\n- CVE-2020-11651: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0431\u0430\u0433\u043e\u0432 \u0432 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 SaltStack Salt.\n- CVE-2017-12611: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0438 OGNL \u0432 Apache Struts.\n- CVE-2017-7657: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u0438\u043d\u044b \u0431\u043b\u043e\u043a\u0430 Eclipse Jetty.\n- CVE-2021-29441: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Alibaba Nacos AuthFilter.\n- CVE-2020-14179: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Atlassian Jira, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n- CVE-2013-4547: Nginx \u0441\u043e\u0437\u0434\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0441\u0442\u0440\u043e\u043a\u0435 URI.\n- CVE-2019-0230: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Apache Struts 2 RCE.\n- CVE-2018-11776: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0438 OGNL \u0432 Apache Struts.\n- CVE-2020-7961: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Liferay Portal.\n\n\u0420\u0430\u0431\u043e\u0442\u043d\u0435\u043c, \u043f\u043e\u0436\u0430\u043b\u0443\u0439.", "creation_timestamp": "2021-08-25T13:22:18.000000Z"}, {"uuid": "052d039a-a903-4088-9f57-58df299731e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/information_security_channel/9627", "content": "Immediately Patch New Discovered Apache Tomcat RCE Flaw (CVE-2017-12617) that Allows Attackers to Hack Your Servers\u2026 https://t.co/M9uLSpBJcV", "creation_timestamp": "2017-10-05T13:18:32.000000Z"}, {"uuid": "ba666e93-6c72-45e7-b937-2f9bd54b5838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/information_security_channel/9655", "content": "RT @TheHackersNews: Immediately Patch New Discovered Apache Tomcat RCE Flaw (CVE-2017-12617) that Allows Attackers to Hack Your Servers\u2026", "creation_timestamp": "2017-10-05T21:40:16.000000Z"}, {"uuid": "e74bd453-eae6-40ca-9b9f-43c616671c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/9818", "content": "Exploit for Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / RCE (CVE-2017-12617) https://t.co/hYebroyVOT", "creation_timestamp": "2017-10-10T22:17:37.000000Z"}, {"uuid": "65fdf68b-6561-4b4b-8613-489bd4b7de4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/9861", "content": "#Metasploit Module For Tomcat JSP Upload via PUT Bypass (CVE-2017-12615) \n\nhttps://t.co/u2mu0VVDSz\n\nDemo Video: https://t.co/FFJFrrLP4W", "creation_timestamp": "2017-10-11T18:30:10.000000Z"}, {"uuid": "10c452ae-2a7c-4100-b3ac-da4b58eb051b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12613", "type": "seen", "source": "https://t.me/itsecalert/98", "content": "\u26a0\ufe0f F5 Networks BIG-IP Firewalls - Several vulnerabilities (Apache Portable + Linux kernel)\n\n- Linux Kernal bug need local access and a valid user.\n- Apache Bug should also work remotely\n\nCurrently no fix available\n\nFurther information and links to F5: https://yt.gl/ryb06 (by CERT Germany, only available in German)\n(severity: \ud83d\udd38high) \n\n#alert #vulnerability #severityhigh #f5networks #bigip #CVE-2017-1000111 #CVE-2017-1000112 #CVE-2017-12613\nFeel free to discuss this in @itsectalk and let your local firewall admin know! \u2709\ufe0f\ud83d\udce2", "creation_timestamp": "2018-03-16T13:21:01.000000Z"}, {"uuid": "02f456d0-c4e5-4745-871a-bef18746643e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/2409", "content": "CVE-2017-12617\nApache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution\nhttps://github.com/cyberheartmi9/CVE-2017-12617", "creation_timestamp": "2017-10-09T22:18:05.000000Z"}, {"uuid": "0b8119c7-d889-406e-9b9b-64b5ff97b169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/293", "content": "ZeroDaily | 2017-10-10 | Breach blame game, Cyber victims clueless, and POC for CVE-2017-12617 \nhttps://www.hackerone.com/zerodaily/2017-10-10", "creation_timestamp": "2017-10-11T10:19:15.000000Z"}, {"uuid": "538ec7fd-5816-4011-8b27-c22bb03a431e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/488", "content": "cve-2017-12615\n\n#tools #exploit", "creation_timestamp": "2024-10-21T13:37:01.000000Z"}, {"uuid": "241374ba-3da5-4aa3-8032-a098346a2edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12619", "type": "seen", "source": "https://t.me/cibsecurity/3887", "content": "ATENTION\u203c New - CVE-2017-12619\n\nApache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by \"stone lone\".\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-04-23T18:25:38.000000Z"}, {"uuid": "7b98a1bc-97d2-4c25-8f3b-04919166d762", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9601a722-c84f-48a7-9574-5163bdf4d895", "content": "", "creation_timestamp": "2026-06-23T11:13:41.667583Z"}, {"uuid": "2c412f55-1a9a-42d2-869a-8c396ad2b852", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3e429dd5-0d4e-41d6-8b84-fdec34bd90a3", "content": "", "creation_timestamp": "2026-06-23T11:13:41.742998Z"}, {"uuid": "d12e6e23-53b3-4774-9649-26f06053df6e", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12615", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/471ee0a5-3a91-47c5-b9a6-3eb42ad07b73", "content": "", "creation_timestamp": "2026-07-01T07:16:58.600677Z"}, {"uuid": "c63b1acd-3547-4538-a764-773fb05bc5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12615", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91799", "content": "", "creation_timestamp": "2026-07-15T00:00:28.698759Z"}, {"uuid": "f5466600-b0bb-4ac5-8b33-f6257f221adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "", "creation_timestamp": "2026-07-26T07:02:00.085860Z"}, {"uuid": "3de0ac52-673c-42f2-89a8-3b6eec0ecc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "", "creation_timestamp": "2026-07-26T07:01:59.917183Z"}, {"uuid": "5c5379f2-611e-4c9e-818d-a7379439c17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12616", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "", "creation_timestamp": "2026-07-26T07:01:59.869759Z"}, {"uuid": "7b307a5d-15ec-4667-9b3d-425fe06b5617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12615", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "", "creation_timestamp": "2026-07-27T00:01:41.945189Z"}, {"uuid": "60bae9fa-a8b4-49c4-b279-dc94b854e8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "", "creation_timestamp": "2026-07-27T00:01:41.804826Z"}, {"uuid": "c36ecd49-4b41-476f-9eba-0e42cdd1c0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12616", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "", "creation_timestamp": "2026-07-27T00:01:41.768172Z"}]}