weblogic_cve-2019-2890

1）Iniciar la herramienta XXER python xxer.py -H 192.168.17.223 2）Colocar el PoC de xxer en el archivo xx.xml, reemplazar los datos serializados e inyectar el PoC de xxer; java -jar weblogicxxe.jar xx.xml 3）Usar la herramienta java-deserialization-exploit, específicamente weblogic.py, para enviar...

CVE-2026-47759 TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via unsanitized data-mce- attributes data-mce-href, data-mce-src, data-mce-style. Allows attackers to inject malicious values that override safe attributes during serialization,...