17 matches found
CVE-2019-2729-Exploit
CVE-2019-2729-Exploit الاستخدام: oracle-weblogic-deserialize.py -h -u TARGET -c COMMAND -h, --help : عرض رسالة المساعدة والخروج -u TARGET : رابط الهدف URL -c COMMAND : الأمر المراد تنفيذه مثال الاستخدام python oracle-weblogic-deserialize.py -u http://192.168.1.1:8080 -c whoami إشادة بحمولة YSS...
Weblogic
weblogic CVE-2019-2725 CVE-2019-2729 POC Exécute des commandes et affiche le résultat Utilisation : Cible unique python3 weblogicgetwebshell.py http://url Cibles multiples, placez les URL en masse dans urllist.txt python3 weblogicgetwebshell.py all...
vulmap
🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...
weblogic-CVE-2019-2729-POC
weblogic-CVE-2019-2729-POC POC python3 pour la vulnérabilité de désérialisation WebLogic CVE-2019-2729 et CVE-2017-10271, entre autres...
Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router
CVE-2019-2729 - creal PoC for exploiting CVE-2019-2729 on Web...
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit
Exploit for java platform in category web applications Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Tested on: Windo...
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Date: 2020-01-08 Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0...
Oracle Weblogic 10.3.6.0.0 Remote Command Execution
Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Date: 2020-01-08 Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Tested on: Windows CVE : CVE-2019-2729 SerialLogic.py...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE...
Code injection
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Shell: Admin / InnoDB Cluster. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...
Oracle WebLogic Server Deserialization RCE (CVE-2019-2729)
The Oracle WebLogic server is affected by a remote code execution vulnerability in wls9asyncresponse.war and wls-wsat.war packages due to unsafe deserialization of Java objects. A remote unauthenticated attacker can exploit the issue by sending a custom Java serialized object via HTTP request to...
Oracle Weblogic Insecure Deserialization (CVE-2019-2729)
A vulnerability has been reported in Oracle Weblogic. This vulnerability is due to insufficient validation of data of HTTP requests. Successful exploitation can result in result in arbitrary code execution...
Exploit for Injection in Oracle Agile_Plm
WebLogic CVE-2019-2725, CVE-2019-2729 – POC Execute comman...
CVE-2019-2729
CVE-2019-2729 affects Oracle WebLogic Server (Web Services component) with unauthenticated remote code execution via deserialization. Affected versions are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability stems from improper deserialization (WebLogic Web Services / XMLDecoder context) an...
New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now
Oracle has released an out-of-band emergency software update to patch a newly discovered critical vulnerability in the WebLogic Server. According to Oracle, the vulnerability—which can be identified as CVE-2019-2729 and has a CVSS score of 9.8 out of 10—is already being exploited in the wild by a...
Oracle Warns of New Actively-Exploited WebLogic Flaw
Oracle said that a critical remote code execution flaw in its WebLogic Server is being actively exploited in the wild. The remote code execution flaw CVE-2019-2729 impacts a number of versions of Oracle’s WebLogic Server, used for building and deploying enterprise applications. The vulnerability...