CVE-2020-14750

CVE-2020-14750 PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882 To test if a system is vulnerable use: ./test-CVE-2020-14750 hostname:7001 At the moment, in this version, it only guarantees if the host is vulnerable. If the result is negative, it is not a guarantee that it is not...

CVE-2026-21962

CVE-2026-21962 CVE-2026-21962 EJEMPLO Objetivo único root@kitploit: python3 CVE-2026-21962.py http://target:7001 -c "whoami" Lote + whoami por defecto root@kitploit: python3 CVE-2026-21962.py -f url.txt Lote + comando personalizado + cambiar número de hilos root@kitploit: python3 CVE-2026-21962.p...

CVE-2023-21837

CVE-2023-21837 POC、EXP，ChatGPT 为我生成 代码 root@kitploit: import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost, targetport...

CVE-2020-2551

CVE-2020-2551 Los scripts de configuración de este proyecto han sido probados en la versión 10.3.6; la versión 12 no ha sido probada. Entorno kali+weblogic10.3.6+jdk6u25 Asegúrese de que la máquina que implementa weblogic tenga al menos 1.5G de memoria, porque el parámetro -x1024m está especifica...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882/14883/14750 USO 1. clona este repositorio 2. instala la librería requests 3. python3 14882.py EJEMPLO root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator referencia...

CVE-2015-4852

CVE-2015-4852 Requisito: coloque ysoserial.jar en el directorio del script renombre ysoserial-0.jar como ysoserial.jar; se recomienda ejecutar este script con Kali Linux. 1. Método de uso: root@kali: python3 CVE-2015-4852.py -h Usage: python CVE-2015-4852.py -t/--target 1.1.1.1 7001 Options: -h,...

CVE-2018-2628

CVE-2018-2628 root@kitploit: use: exploit.py 192.168.1.1:7001 exploit.py url.txt 格式： 192.168.31.1:7001 192.168.31.100:7001...

CVE-2018-2893

Script de verificación de la vulnerabilidad CVE-2018-2893 Uso root@kitploit: python CVE-2018-2893.py 10.10.0.1 7001 Análisis y alerta root@kitploit: https://www.anquanke.com/post/id/152164 Fuente del script root@kitploit: https://www.secfree.com/article-957.html...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Wr...

EUVD-2019-3769

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2015-4852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a...

SUSE CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle WebLogic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the T3 protocol on TCP port 7001. When deserializing objects embedded wi...

Oracle WebLogic DeploymentService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle WebLogic. Authentication is required to exploit this vulnerability. The specific flaw exists within the DeploymentService, which listens on TCP port 7001 by default. When parsing the...

Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion

Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion ''' Exploit Title: Thomson Reuters Concourse & Firm Central 2.13.0097 - Directory Traversal & Local File Inclusion Date: 02/13/2019 Exploit Author: 0v3rride Vendor Homepage:...

Softros Network Time System Server 2.3.4 Denial Of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOFTROS-NETWORK-TIME-SYSTEM-SERVER-v2.3.4-DENIAL-OF-SERVICE.txt + ISR: Apparition Security Vendor: ============= www.softros.com https://nts.softros.com/downloads/ Product:...

Oracle WebLogic Server Multiple Vulnerabilities (January 2016 CPU)

Binary data oracleweblogicservercpujan2016.nbin...

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server is an Oracle application server for cloud and legacy environments that provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application deployment and management.WLS...

Code injection

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...