CVE_2020_2546

Twitter: @Hktalent3135773 1. Weblogic RCE 익스플로잇 CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2. 익스플로잇 GIOP + bind 전송 CVE-2020-2555, CVE-2019-2888, CVE-2019-2888 또는 기타 GIOP + jta 전송 rmi 또는 기타 GIOP + jta...

CVE-2020-2551

Twitter: @Hktalent3135773 0、프로 익스플로잇 도구 얻는 방법? https://github.com/hktalent/CVE-2020-2551/issues/5 참고 1、CVE-2020-2551 CVE-2020-2551 poc 익스플로잇 python 예제 키워드: GIOP corba 사용 방법 python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3 CVE-2020-2551.py -u % cat...

CVE-2024-48121

The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...

CVE-2024-48125

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

CVE-2024-48121

The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...

CVE-2024-48125

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

CVE-2024-48121

The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...

CVE-2024-48125

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

CVE-2024-48125

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

CVE-2024-48121

The ** Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I** (an entry-level X-ray equipment electronic component) is vulnerable to a security flaw where it transmits user credentials in cleartext over the GIOP protocol . An attacker could exploit this via a man-in-the-middle attack to gain access t...

CVE-2024-48121: Cleartext Transmission of Sensitive Information

The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...

CVE-2024-48125: Exposure of Sensitive Information to an Unauthorized Actor

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

SUSE CVE-2018-9269

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak...

CVE-2016-9796

The CVE-2016-9796 issue affects Alcatel-Lucent OmniVista 8770 (versions 2.0–3.0). The root cause is an authentication bypass that allows an attacker to query GIOP interfaces over TCP port 30024 and invoke methods (AddJobSet, AddJob, ExecuteNow) to run arbitrary commands with NT AUTHORITY\SYSTEM p...

CVE-2016-9796

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...