CVE-2020-14750

CVE-2020-14750 PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882 To test if a system is vulnerable use: ./test-CVE-2020-14750 hostname:7001 At the moment, in this version, it only guarantees if the host is vulnerable. If the result is negative, it is not a guarantee that it is not...

CVE-2015-4852

CVE-2015-4852 Voraussetzung: ysoserial.jar muss in das Skriptverzeichnis gelegt werden ysoserial-0.jar in ysoserial.jar umbenennen. Am besten führt man das Skript mit Kali Linux aus. 1. Verwendung： root@kali: python3 CVE-2015-4852.py -h Usage: python CVE-2015-4852.py -t/--target 1.1.1.1 7001...

CVE-2026-21962

CVE-2026-21962 CVE-2026-21962 ESEMPIO Singolo target root@kitploit: python3 CVE-2026-21962.py http://target:7001 -c "whoami" Batch + whoami predefinito root@kitploit: python3 CVE-2026-21962.py -f url.txt Batch + comando personalizzato + modifica del numero di thread root@kitploit: python3...

CVE-2018-2893

Скрипт для проверки уязвимости CVE-2018-2893 Инструкция по использованию root@kitploit: python CVE-2018-2893.py 10.10.0.1 7001 Анализ и предупреждение root@kitploit: https://www.anquanke.com/post/id/152164 Источник скрипта root@kitploit: https://www.secfree.com/article-957.html...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882/14883/14750 उपयोग 1. इस रिपॉजिटरी को क्लोन करें 2. requests लाइब्रेरी इंस्टॉल करें 3. python3 14882.py उदाहरण root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator संदर्भ...

CVE-2020-2551

CVE-2020-2551 Le script de déploiement de ce projet a été testé sur la version 10.3.6, la version 12 n'a pas été testée. Environnement kali+weblogic10.3.6+jdk6u25 Assurez-vous que la machine déployant weblogic dispose d'au moins 1.5G de mémoire, car le paramètre -x1024m est spécifié dans le scrip...

CVE-2023-21837

CVE-2023-21837 POC, EXP, chatGPT per me Codice root@kitploit: import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost,...

CVE-2018-2628

CVE-2018-2628 root@kitploit: use: exploit.py 192.168.1.1:7001 exploit.py url.txt 格式： 192.168.31.1:7001 192.168.31.100:7001...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Wr...

EUVD-2019-3769

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2015-4852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a...

SUSE CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle WebLogic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the T3 protocol on TCP port 7001. When deserializing objects embedded wi...

Oracle WebLogic DeploymentService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle WebLogic. Authentication is required to exploit this vulnerability. The specific flaw exists within the DeploymentService, which listens on TCP port 7001 by default. When parsing the...

Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion

Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion ''' Exploit Title: Thomson Reuters Concourse & Firm Central 2.13.0097 - Directory Traversal & Local File Inclusion Date: 02/13/2019 Exploit Author: 0v3rride Vendor Homepage:...

Softros Network Time System Server 2.3.4 Denial Of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOFTROS-NETWORK-TIME-SYSTEM-SERVER-v2.3.4-DENIAL-OF-SERVICE.txt + ISR: Apparition Security Vendor: ============= www.softros.com https://nts.softros.com/downloads/ Product:...

Oracle WebLogic Server Multiple Vulnerabilities (January 2016 CPU)

Binary data oracleweblogicservercpujan2016.nbin...

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server is an Oracle application server for cloud and legacy environments that provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application deployment and management.WLS...

Code injection

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...