CVE-2024-21006_PoC

CVE-2024-21006 PoC CVE-2024-21006는 Oracle WebLogic Server에 영향을 주는 치명적인 원격 코드 실행RCE 취약점입니다. 이 결함은 IIOPInternet Inter-ORB Protocol 및 JNDIJava Naming and Directory Interface 프로토콜의 안전하지 않은 사용과 관련되어 있으며, 인증되지 않은 원격 공격자가 악의적인 JNDI 참조를 통해 영향을 받는 서버에서 임의 코드를 실행할 수 있게 합니다. 실습 환경 배포 환경을 구축합니다: docker-compo...

CVE-2026-27830 c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and javax.naming.Reference instances. Several c3p0 ConnectionPoolDataSource implementations have a property called userOverridesAsString which conceptually represents a Map. Prior to...

CVE-2026-27727 mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an...