CVE-Exploit

Twitter: @0xAbbarhSF 1、CVE-2020-2551 CVE-2020-2551 poc exploit python example keys: GIOP corba How use python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3 CVE-2020-2551.py -u % cat xxx.html|grep -Eo 'https?://^ /+'|sort -u|xargs -I % python3...

openjdk: Enhance CORBA (Oracle CPU 2026-10)

A flaw was found in the Common Object Request Broker Architecture CORBA component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces APIs over the network. A successful attack can result in a parti...

openjdk: Enhance CORBA (Oracle CPU 2026-10)

A flaw was found in the Common Object Request Broker Architecture CORBA component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces APIs over the network. A successful attack can result in a parti...

openjdk: Enhance CORBA (Oracle CPU 2026-10)

A flaw was found in the Common Object Request Broker Architecture CORBA component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces APIs over the network. A successful attack can result in a parti...

openjdk: Enhance CORBA (Oracle CPU 2026-10)

A flaw was found in the Common Object Request Broker Architecture CORBA component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces APIs over the network. A successful attack can result in a parti...

openjdk: Enhance CORBA (Oracle CPU 2026-10)

A flaw was found in the Common Object Request Broker Architecture CORBA component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces APIs over the network. A successful attack can result in a parti...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC to use on the Internet Test POC can be used for external network testing python CVE-2020-2551.py HOST IP Attempt to modify codebase for remote class loading failed python CVE-2020-TEST.py HOST IP Discussion on weblogic CVE-2020-2551 vulnerabili...

CVE-2020-2551

Twitter: @Hktalent3135773 0、how get pro exploit tools? see https://github.com/hktalent/CVE-2020-2551/issues/5 1、CVE-2020-2551 CVE-2020-2551 poc exploit python example keys: GIOP corba How use python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3...

OpenJDK 8 <= 8u382 / 11.0.0 <= 11.0.20 / 17.0.0 <= 17.0.8 / 21.0.0 <= 21.0.0 Multiple Vulnerabilities (2023-10-17)

The version of OpenJDK installed on the remote host is 8 prior to or at 8u382 / 11.0.0 prior to or at 11.0.0 / 17.0.0 prior to or at 17.0.8 / prior to or at 21.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-10-17 advisory. Please Note: Java CVEs do not alway...

CVE-2026-15564

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if the target EJB allows untyped method parameters, and dependi...

CVE-2026-91417

A flaw was found in the Common Object Request Broker Architecture CORBA component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces APIs over the network. A successful attack can result in a parti...

EUVD-2026-106668

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated...

EUVD-2026-106665

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Integration - Scripting. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via CORBA to compromise Siebel CRM Development...

Linux Distros Unpatched Vulnerability : CVE-2026-91417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Orac...

ALPINE-CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-91413

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Integration - Scripting. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via CORBA to compromise Siebel CRM Development...

CVE-2026-91417

A vulnerability exists in the CORBA component of Oracle Java SE (versions 8u503 and 8u503-perf) and Oracle GraalVM Enterprise Edition (version 21.3.19.1.1). An unauthenticated attacker with network access can exploit this by supplying data to specific APIs, such as through a web service, without ...

CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated...