CVE-2018-3245

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933 @mbechler CVE20183245 @mbechler...

CVE-2024-21182

CVE-2024-21182 — Oracle WebLogic Server T3/IIOP JNDI Injection → RCE lab A self-contained, one-command Docker lab to reproduce and validate the Oracle WebLogic Server OpaqueReference JNDI-injection vulnerability family CVE-2024-21182, a patch bypass of CVE-2023-21839 and turn it into...

CVE-2020-14882

CVE-2020-14882 This Python script is designed to exploit a Remote Code Execution vulnerability in Oracle WebLogic Server CVE-2020-14882 to execute commands on a vulnerable target server and capture their output through HTTP requests. It first prompts for a target WebLogic URL and network interfac...

Oracle WebLogic Server (October 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Cor...

CVE-2021-2302

CVE-2021-2302 Author: quynhle Gadget chain javax.management.BadAttributeValueExpException.readObject oracle.security.jps.az.internal.common.principals.toString oracle.security.jps.az.internal.common.principals.getResolvedPrincipal . . . con.newInstance...

cve-2019-2618

cve-2019-2618 Weblogic Upload Vulnerability Requires username password - CVE-2019-2618 Python Usage python CVE-2019-2618.py url username password Decrypt Weblogic Password root@f0cb7e674d7e:/Oracle cat...

CVE-2022-21445

CVE-2022-21445 Exploit - PoC This toolkit generates exploit payloads for CVE-2022-21445, a critical Java deserialization vulnerability affecting Oracle WebLogic Server 12.2.1.x running Oracle ADF Faces. The flaw exists in the RemoteApplicationResourceLoader component and allows an attacker to sen...

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified several vulnerabilities in various products, including the Oracle SOA Suite, Oracle WebLogic Server, Oracle Data Integrator, Oracle Identity Manager, Oracle Access Manager, Oracle WebCenter Content, Oracle Fusion Middleware including Helidon, and Oracle HTTP Server. These...

CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE

CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE -orange 📋 Description CVE-2024-21182 is an unauthenticated JNDI injection vulnerability affecting the Core component of Oracle WebLogic Server. It allows a remote attacker, vi...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

CVE-2020-14882_Exploit_Gui

CVE-2020-14882ExploitGui The tool is for authorized use only. I bear no responsibility for unauthorized attacks that lead to criminal cases. Please be familiar with the Cybersecurity Law. During a penetration test, I encountered 14882 and couldn't find a usable GUI POC, so I refactored it. I...

EUVD-2026-106745

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise...

EUVD-2026-106577

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-106387

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...

EUVD-2026-106341

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows...

EUVD-2026-106317

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

EUVD-2026-106297

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows...

EUVD-2026-105928

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acces...

Oracle HTTP Server 12c (October 2026 CPU)

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: OSSL Module. Supported versions that are affected are...

Oracle HTTP Server 14c (October 2026 CPU)

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: OSSL Module. Supported versions that are affected are...