CVE-2024-21006_jar

CVE-2024-21006jar exp 코드 참조: https://github.com/momika233/CVE-2024-21006 여기서는 소스 코드를 jar 패키지로 컴파일하여 사용하기 편리하게 했습니다. lib 아래는 의존성 파일이며, 소스 코드를 수정하고 싶다면 직접 컴파일하면 됩니다. 사용법 java -jar CVE-2024-21006.jar dadvlingd 님의 프로젝트를 참고하여 bind에 무작위 문자열을 사용해 payload를 한 번만 실행할 수 있는 문제를 해결했습니다. 참고...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

CVE-2024-21006 PoC A CVE-2024-21006 é uma vulnerabilidade de...

CVE-2024-21006

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21006

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21006

...

CVE-2024-21006

CVE-2024-21006 affects Oracle WebLogic Server (Core) in 12.2.1.4.0 and 14.1.1.0.0. The connected PoC demonstrates unauthenticated remote code execution via IIOP/JNDI (T3/IIOP access) leading to arbitrary code execution and data compromise. Oracle’s April 2024 CPU provides fixes (update to version...