1299 matches found
CVE-2018-2628-MultiThreading
WebLogic WLSๆ ธๅฟใณใณใใผใใณใ้ใทใชใขใซๅ่ๅผฑๆง CVE-2018-2628 ์ฌ์ฉ๋ฒ: ๊ฐ์งํ 'ip:port'๋ฅผ ๋์ผํ ๋๋ ํฐ๋ฆฌ์ url.txt ํ์ผ์ ๋ฃ์ต๋๋ค. ๊ทธ๋ฐ ๋ค์ ์คํํฉ๋๋ค: ์ฝ๋ 93ํ์์ ์ค๋ ๋ ์ ์์ python CVE-2018-2628-MultiThreading.py Usage: Place the 'ip:port' to be detected into the url.txt file in the same directory. Then run: python CVE-2018-2628-MultiThreading.p...
CVE-2026-60206
CVE-2026-60206 โ Oracle WebLogic Server SAML ์ธ์ฆ ์ฐํ PoC ์ด ์ ์ฅ์๋ Oracle WebLogic Server์ SAML ๊ตฌํ์์ ๋ฐ๊ฒฌ๋ ์ฌ๊ฐํ ์ธ์ฆ ์ฐํ ์ทจ์ฝ์ ์ธ CVE-2026-60206 ์ ๋ํ ๊ฐ๋ ์ฆ๋ช PoC ์ต์คํ๋ก์์ ์ ๊ณตํฉ๋๋ค. ์ด ๊ฒฐํจ์ผ๋ก ์ธํด ์๊ฒฉ์ ๋ฎ์ ๊ถํ์ ๊ฐ์ง ๊ณต๊ฒฉ์๊ฐ SAML ์ด์์ assertion์ ์์กฐํ์ฌ ์๋ฒ๋ฅผ ์์ ํ ์ฅ์ ํ ์ ์์ต๋๋ค. โ ๏ธ ๋ฉด์ฑ ์กฐํญ: ์ด ๋๊ตฌ๋ ์น์ธ๋ ๋ณด์ ์ฐ๊ตฌ ๋ฐ ํ ์คํธ ๋ชฉ์ ์ผ๋ก๋ง ์ฌ์ฉ๋ฉ๋๋ค. ์์ ํ๊ฑฐ๋ ๋ช ์์ ํ ์คํธ ๊ถํ์ด ์๋...
CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE
CVE-2024-21182 - Oracle WebLogic Server JNDI Injection โ RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection โ RCE -orange ๐ ์ค๋ช CVE-2024-21182 ๋ Oracle WebLogic Server์ Core ๊ตฌ์ฑ ์์์ ์ํฅ์ ๋ฏธ์น๋ ์ธ์ฆ๋์ง ์์ JNDI ์ธ์ ์ ์ทจ์ฝ์ ์ ๋๋ค. ๊ณต๊ฒฉ์๊ฐ T3 ๋๋ IIOP ํ๋กํ ์ฝ์ ํตํด ์๊ฒฉ์ผ๋ก ์์ ์ฝ๋๋ฅผ ์คํRCEํ ์ ์์ผ๋ฉฐ, ์๋ฒ์ ๋ชจ๋ ๋ฐ์ดํฐ์ ๋ํ ์์ ํ ์ ๊ทผ ๊ถํ์...
CVE-2026-91743
A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516947138...
CVE-2026-87284
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2026-87285
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2026-87282
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2026-87283
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2026-87278
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2026-87277
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this...
CVE-2026-87273
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2026-87280
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2026-87270
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...
CVE-2026-87271
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...
CVE-2026-87272
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...
CVE-2026-87267
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of thi...
CVE-2026-83410
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
CVE-2026-83024
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...
CVE-2026-70915
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...
CVE-2026-70913
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager...