EUVD-2024-18889

Malicious code in bioql PyPI...

EUVD-2024-18721

Malicious code in bioql PyPI...

EUVD-2025-21514

Malicious code in bioql PyPI...

EUVD-2024-18929

Malicious code in bioql PyPI...

EUVD-2024-18948

Malicious code in bioql PyPI...

EUVD-2023-26007

Malicious code in bioql PyPI...

EUVD-2022-26572

Malicious code in bioql PyPI...

EUVD-2022-26788

Malicious code in bioql PyPI...

EUVD-2023-26272

Malicious code in bioql PyPI...

EUVD-2022-2873

Malicious code in bioql PyPI...

EUVD-2022-26588

Malicious code in bioql PyPI...

EUVD-2023-26003

Malicious code in bioql PyPI...

EUVD-2022-26665

Malicious code in bioql PyPI...

EUVD-2023-26161

Malicious code in bioql PyPI...

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

K8tools

It is an offensive tool for web application exploitation. The repository, K8tools, contains a collection of tools for various purposes, including internal penetration, privilege escalation, remote overflow, vulnerability exploitation, scanning, password cracking, and evasion. The primary focus is...

PT-2025-35398

CVE-2025-58329 - Oracle WebLogic Server Deserialization RCE CVE ID : CVE-2025-58329 Published : Aug. 29, 2025, 3:15 a.m. | 3 hours, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product

SUMMARY Hitachi Energy is aware of a remote code execution vulnerability that affects the Oracle WebLogic component in the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability...

Linux Distros Unpatched Vulnerability : CVE-2015-4852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a...