CVE-2020-14756

CVE-2020-14756 coherence.jar の ExternalizableHelper.class による WebLogic T3/IIOP RCE README プロジェクトは https://github.com/Y4er/CVE-2020-2555 と weblogiccmd に基づいています 12.2.1.4.0 と jdk 1.8.0221 でテスト済み 参考 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2. https://mp.weixin.qq.com/s/E-4wjbKD-iSi0CEMegVmZQ...

CVE-2020-14882

CVE-2020-14882 coherence ShellSession calc.exe の実行 root@kitploit: import requests url = 'http://:/console/images/%252E%252E%252Fconsole.portal' \ '?nfpb=true&pageLabel=HomePage1&handle=com.tangosol.coherence.mvel2.sh.ShellSession' ...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPUドライバー--共鳴-脆弱性 NVIDIAのGPUドライバーは、メモリ管理に時間的コヒーレンスの欠陥を抱えています。587 kHzの共鳴時に、ドライバーのメモリページはα崩壊干渉を受け、ユーザー空間からカーネルメモリへのアクセスが可能になります。 NVIDIA GPU α共鳴エクスプロイト CVE-2024-0070 概要 このエクスプロイトは、収束時間理論 CTT の原理を用いて、NVIDIA GPUドライバーにおける時間的コヒーレンスの脆弱性 を実証します。この脆弱性は、GPUクロック周波数が587 kHzの整数倍高調波...

cve-2020-14882

CVE-2020-14882 影響を受けるバージョン: 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0、14.1.1.0.0 POC: root@kitploit: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';"; image: EXP：...

CVE-2020-2555

CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE com.supeream.CVE20202555 root@kitploit: / author:Y4er.com gadget: BadAttributeValueExpException.readObject com.tangosol.util.filter.LimitFilter.toString com.tangosol.util.extractor.ChainedExtractor.extract...

Weblogic_CVE-2020-2883_POC

Weblogic CVE-2020-2883 の POC poc1: root@kitploit: javax.management.BadAttributeValueExpException.readObject com.tangosol.internal.sleepycat.persist.evolve.Mutations.toString java.util.concurrent.ConcurrentSkipListMap$SubMap.size java.util.concurrent.ConcurrentSkipListMap$SubMap.isBeforeEnd...

CVE-2026-83416

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83411

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence...

CVE-2026-83415

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-83410

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2026-83414

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle...

CVE-2026-83413

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83412

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle...

CVE-2026-83354

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability i...

EUVD-2026-79717

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83415

Oracle Coherence (Core component) of Oracle Fusion Middleware is affected by a vulnerability in supported versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to fully compromise the product, resulting in ...

CVE-2026-83416

Oracle Coherence (component: Core ) in Oracle Fusion Middleware versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 is affected by a vulnerability exploitable over HTTP by a low-privileged attacker with network access and no user interaction. Successful exploitation results in a partial d...

EUVD-2026-79716

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

EUVD-2026-79715

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle...

CVE-2026-83414

CVE-2026-83414 affects Oracle Coherence (Oracle Fusion Middleware, component: Core ), version 15.1.1.0.0 . The vulnerability is described as difficult to exploit and requires a low-privileged attacker with local logon to the infrastructure where Oracle Coherence executes. Successful exploitation ...