CVE-2020-14750

CVE-2020-14750 PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882 To test if a system is vulnerable use: ./test-CVE-2020-14750 hostname:7001 At the moment, in this version, it only guarantees if the host is vulnerable. If the result is negative, it is not a guarantee that it is not...

CVE-2023-21837

CVE-2023-21837 POC,EXP, chatGPT for me code root@kitploit: import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost,...

CVE-2026-21962

CVE-2026-21962 CVE-2026-21962 EXAMPLE 单目标 root@kitploit: python3 CVE-2026-21962.py http://target:7001 -c "whoami" 批量 + 默认 whoami root@kitploit: python3 CVE-2026-21962.py -f url.txt 批量 + 自定义命令 + 改线程数 root@kitploit: python3 CVE-2026-21962.py -f url.txt -c "id" --threads 20 -o result.txt 反弹 shell 示例...

CVE-2020-2551

CVE-2020-2551 The setup script of this project has been tested on version 10.3.6, version 12 has not been tested. Environment kali+weblogic10.3.6+jdk6u25 Ensure the machine deploying weblogic has at least 1.5G of memory, because the script specifies -x1024m in its parameters. Usage Deploy weblogi...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882/14883/14750 USE 1. clone this repo 2. install requests lib 3. python3 14882.py E.G root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator reference https://github.com/jas502n/CVE-2020-14882...

CVE-2018-2893

CVE-2018-2893 Vulnerability Verification Script Usage root@kitploit: python CVE-2018-2893.py 10.10.0.1 7001 Analysis Warning root@kitploit: https://www.anquanke.com/post/id/152164 Script Source root@kitploit: https://www.secfree.com/article-957.html...

CVE-2015-4852

CVE-2015-4852 Prerequisite: Place ysoserial.jar in the script directory rename ysoserial-0.jar to ysoserial.jar. It is best to run this script on Kali Linux. 1. Usage: root@kali: python3 CVE-2015-4852.py -h Usage: python CVE-2015-4852.py -t/--target 1.1.1.1 7001 Options: -h, --help show this help...

CVE-2018-2628

CVE-2018-2628 root@kitploit: use: exploit.py 192.168.1.1:7001 exploit.py url.txt 格式： 192.168.31.1:7001 192.168.31.100:7001...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Wr...

EUVD-2019-3769

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2015-4852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a...

SUSE CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle WebLogic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the T3 protocol on TCP port 7001. When deserializing objects embedded wi...

Oracle WebLogic DeploymentService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle WebLogic. Authentication is required to exploit this vulnerability. The specific flaw exists within the DeploymentService, which listens on TCP port 7001 by default. When parsing the...

Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion

Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion ''' Exploit Title: Thomson Reuters Concourse & Firm Central 2.13.0097 - Directory Traversal & Local File Inclusion Date: 02/13/2019 Exploit Author: 0v3rride Vendor Homepage:...

Softros Network Time System Server 2.3.4 Denial Of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOFTROS-NETWORK-TIME-SYSTEM-SERVER-v2.3.4-DENIAL-OF-SERVICE.txt + ISR: Apparition Security Vendor: ============= www.softros.com https://nts.softros.com/downloads/ Product:...

Oracle WebLogic Server Multiple Vulnerabilities (January 2016 CPU)

Binary data oracleweblogicservercpujan2016.nbin...

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server is an Oracle application server for cloud and legacy environments that provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application deployment and management.WLS...

Code injection

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...