17 matches found
vulmap
🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...
Weblogic
root@kitploit: weblogic CVE-2019-2725 CVE-2019-2729 POC 执行命令并回显 usage: 单个目标 python3 weblogicgetwebshell.py http://url 批量目标，将批量url放入urllist.txt python3 weblogicgetwebshell.py all...
weblogic-CVE-2019-2729-POC
weblogic-CVE-2019-2729-POC python3 POC para CVE-2019-2729 Vulnerabilidad de Deserialización de WebLogic y CVE-2017-10271 entre otros...
CVE-2019-2729-Exploit
CVE-2019-2729-Exploit 用法: oracle-weblogic-deserialize.py -h -u TARGET -c COMMAND -h, --help : 显示帮助信息并退出 -u TARGET : 目标URL -c COMMAND : 要执行的命令 示例用法 python oracle-weblogic-deserialize.py -u http://192.168.1.1:8080 -c whoami YSS Payload 致谢 https://github.com/waffl3ss/CVE-2019-2729...
Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router
CVE-2019-2729 - creal PoC for exploiting CVE-2019-2729 on Web...
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit
Exploit for java platform in category web applications Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Tested on: Windo...
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Date: 2020-01-08 Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0...
Oracle Weblogic 10.3.6.0.0 Remote Command Execution
Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Date: 2020-01-08 Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Tested on: Windows CVE : CVE-2019-2729 SerialLogic.py...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE...
Code injection
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Shell: Admin / InnoDB Cluster. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...
Oracle WebLogic Server Deserialization RCE (CVE-2019-2729)
The Oracle WebLogic server is affected by a remote code execution vulnerability in wls9asyncresponse.war and wls-wsat.war packages due to unsafe deserialization of Java objects. A remote unauthenticated attacker can exploit the issue by sending a custom Java serialized object via HTTP request to...
Oracle Weblogic Insecure Deserialization (CVE-2019-2729)
A vulnerability has been reported in Oracle Weblogic. This vulnerability is due to insufficient validation of data of HTTP requests. Successful exploitation can result in result in arbitrary code execution...
Exploit for Injection in Oracle Agile_Plm
WebLogic CVE-2019-2725, CVE-2019-2729 – POC Execute comman...
CVE-2019-2729
CVE-2019-2729 affects Oracle WebLogic Server (Web Services component) with unauthenticated remote code execution via deserialization. Affected versions are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability stems from improper deserialization (WebLogic Web Services / XMLDecoder context) an...
New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now
Oracle has released an out-of-band emergency software update to patch a newly discovered critical vulnerability in the WebLogic Server. According to Oracle, the vulnerability—which can be identified as CVE-2019-2729 and has a CVSS score of 9.8 out of 10—is already being exploited in the wild by a...
Oracle Warns of New Actively-Exploited WebLogic Flaw
Oracle said that a critical remote code execution flaw in its WebLogic Server is being actively exploited in the wild. The remote code execution flaw CVE-2019-2729 impacts a number of versions of Oracle’s WebLogic Server, used for building and deploying enterprise applications. The vulnerability...