4192 matches found
Oracle WebLogic Server Web Services RCE
Remote code execution vulnerability in Oracle WebLogic Server Web Services via XMLDecoder Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
PT-2020-07: Arbitrary file reading in Oracle WebLogic Server
A vulnerability in Oracle WebLogic Server allows remote attackers to read local files in the context of the web server using a service URL and a specially crafted request. To exploit the vulnerability an adversary should have an administrative account. Access to the administrative panel is not...
Top 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
A recent report identified 19+ vulnerabilities that should be mitigated by end of year 2019. These are a range of top vulnerabilities attacked and leveraged by Advance Persistent Threat APT actors from all parts of the world. The list below shows those top 19 vulnerabilities, and it should be no...
Command Execution Vulnerability in Oracle WebLogic Server
WebLogic Server is Oracle's JavaEE-based middleware for developing, integrating, deploying and managing large-scale distributed Web applications, web applications and database applications. A command execution vulnerability exists in Oracle WebLogic Server. An attacker can cause arbitrary code...
Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server
CVE-2018-2628 Weblogic GetShell.py is a Python script that exploits the Oracle Weblogic Server deserialization vulnerability. The script generates a payload using ysoserial and sends it to the target server. The payload is a serialized Java object that, when deserialized, executes arbitrary code...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725-POC CVE-2019-2725-POC Modif...
Exploit for CVE-2019-2890
CVE-2019-2890 WebLogic 反序列化RCE漏洞...
Arbitrary File Read Vulnerability in Oracle WebLogic Component
WebLogic is the United States Oracle Corporation produced a middleware based on the JAVAEE architecture , is used to develop , integrate , deploy and manage large-scale distributed Web applications , network applications and database applications of Java application servers . An arbitrary file re...
Exploit for CVE-2018-2894
Ladon Scanner for Python !Authorhttps://img.shields.io/bad...
Oracle WebLogic Server AbstractPlatformTransactionManager Insecure Deserialization (CVE-2018-3191)
An insecure deserialization vulnerability has been reported in Oracle WebLogic Server. A remote attacker can exploit this vulnerability by sending a specially crafted serialized object. Successful exploitation can result in arbitrary code execution in the context of the user account running...
The vulnerability of the EJB container component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain unauthorized access to protected information.
The vulnerability of the EJB container of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information v...
The vulnerability of the Console sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows a perpetrator to gain full control over the application.
The vulnerability of the Console sub-component of the Oracle WebLogic Server application server software, part of the Oracle Fusion Middleware platform, is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control...
The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...
The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows a perpetrator to gain full control over the application.
The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full contro...
The vulnerability of the Sample apps sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows an intruder to gain unauthorized access to read, modify, add, or delete data.
The vulnerability of the Sample apps sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...
The vulnerability of the SOAP with Attachments API for Java application server of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows a malicious individual to gain unauthorized access to read, modify, add, or delete data.
The vulnerability of the SOAP with Attachments API for Java application servers on Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
Exploit for CVE-2019-2888
CVE-2019-2888 WebLogic EJBTaglibDescriptor XXE漏洞 !./info.p...
Exploit for CVE-2019-2890
1 Enable the XXER tool python xxer.py -H 192.168.17.223 2...
Unspecified Vulnerability in CloudBees Jenkins Deploy WebLogic Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Deploy WebLogic Plugin is used in which a...