CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

WebLogic “Java 反序列化”过程远程命令执行漏洞

漏洞原理 反序列化是指特定语言中将传递的对象序列化数据重新恢复为实例对象的过程，而在这个过程中会执行一系列的字节流解析和对象实例化操作用于恢复之前序列化时的对象。在原博文所提到的那些 Java 应用里都有特定的接口用于传递序列化对象数据，而在反序列化时并没有限制实例化对象的类型，导致可以任意构造应用中已经包含的对象利用反序列化操作进行实例化。 Java 在进行反序列化操作的时候会使用 ObjectInputStream 类调用 readObject...

CVE-2013-7001

CVE-2013-7001 concerns NowSMS Now SMS & MMS Gateway prior to 2013.11.15. The MMSC may trigger a denial of service when processing a malformed MM1 message that is routed to a MM4 or MM7 connection. Affected component: Multimedia Messaging Centre (MMSC) in NowSMS gateway. Underlying cause: malforme...

CVE-2008-7001

CVE-2008-7001 is a documented unrestricted file upload vulnerability in the file manager of Creative Mind Creator CMS 5.0. The underlying issue permits remote attackers to execute arbitrary code via unknown vectors, enabling potential code execution with partial confidentiality/integrity/availabi...

CVE-2008-7001

creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6405...

CVE-2006-7001

Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-7001

CVE-2006-7001 describes a directory traversal in PhpMyChat Plus 1.9 and earlier. The vulnerable component is the avatar.php handler, where an attacker can supply a "L" parameter containing ".." to read arbitrary files on the server. This mirrors the established issue family in PhpMyChat Plus 1.9 ...