CVE-2025-48976

The PoC demonstrates a DoS vulnerability by sending maliciously crafted multipart/form-data requests with excessive headers and parts to overwhelm the target server. It targets a JSP upload endpoint, likely exploiting a resource exhaustion flaw.

This repository contains a functional proof-of-concept exploit for CVE-2025-48988 and CVE-2025-48976, targeting a DoS vulnerability in Tomcat 10.1.41 via crafted multipart requests. The exploit sends high-volume multipart requests to trigger excessive CPU usage, with a Docker setup for testing and remediation guidance.