Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

3775 matches found

Packet Storm
Packet Storm•added 2019/05/24 12:00 a.m.•117 views

Oracle Application Testing Suite WebLogic Server Administration Console War Deployment

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Application Testing Suite WebLogic Server Administration Console War Deployment', 'Description' = %q This module abuses a feature in...

7.1CVSS0.29305EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories•added 2019/05/19 12:00 a.m.•37 views

Oracle Fusion Middleware Information Disclosure (CVE-2019-2615)

An information disclosure vulnerability exists in Oracle WebLogic Server component of Oracle Fusion Middleware. Successful exploitation could result in the disclosure of sensitive information...

4CVSS1.1AI score0.06002EPSS
SaveExploits0
Exploit DB
Exploit DB•added 2019/05/08 12:00 a.m.•298 views

Oracle Weblogic Server - 'AsyncResponseService' Deserialization Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Weblogic Server Deserialization RCE - AsyncResponseService ', 'Description' = %q An unauthenticated attacker with network access to the...

9.8CVSS7.7AI score0.99977EPSS
SaveExploits37
zdt
zdt•added 2019/05/07 12:00 a.m.•1622 views

Oracle Weblogic Server Deserialization Remote Code Execution Exploit

An unauthenticated attacker with network access to the Oracle Weblogic Server T3 interface can send a malicious SOAP request to the interface WLS AsyncResponseService to execute code on the vulnerable host. This module requires Metasploit: https://metasploit.com/download Current source:...

9.8CVSS7.9AI score0.99977EPSS
SaveExploits37
Packet Storm
Packet Storm•added 2019/05/07 12:00 a.m.•473 views

Oracle Weblogic Server Deserialization Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Weblogic Server Deserialization RCE - AsyncResponseService ', 'Description' = %q An unauthenticated attacker with network access to the...

7.5CVSS7.7AI score0.99977EPSS
SaveExploits37
GithubExploit
GithubExploit•added 2019/05/06 10:33 a.m.•189 views

Exploit for CVE-2019-2618

CVE-2019-2618 – Vulnerability Detection Tool Enter the serve...

5.5CVSS6.8AI score0.32881EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories•added 2019/05/05 12:00 a.m.•65 views

Oracle Fusion Middleware Remote Code Execution (CVE-2019-2618)

A remote code execution vulnerability exists in Oracle WebLogic Server component of Oracle Fusion Middleware. Successful exploitation of this vulnerability could lead to remote code execution on the target server...

5.5CVSS7AI score0.32881EPSS
SaveExploits3
Saint
Saint•added 2019/05/02 12:00 a.m.•995 views

Oracle WebLogic Server deserialization remote code execution

Added: 05/02/2019 CVE: CVE-2019-2725 BID: 108074 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server component of Oracle Fusion Middleware has a deserialization vulnerability in Web Services subcomponent, which allows...

7.5CVSS7.6AI score0.99977EPSS
SaveExploits37
Saint
Saint•added 2019/05/02 12:00 a.m.•255 views

Oracle WebLogic Server deserialization remote code execution

Added: 05/02/2019 CVE: CVE-2019-2725 BID: 108074 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server component of Oracle Fusion Middleware has a deserialization vulnerability in Web Services subcomponent, which allows...

9.8CVSS7.6AI score0.99977EPSS
SaveExploits37
Saint
Saint•added 2019/05/02 12:00 a.m.•140 views

Oracle WebLogic Server deserialization remote code execution

Added: 05/02/2019 CVE: CVE-2019-2725 BID: 108074 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server component of Oracle Fusion Middleware has a deserialization vulnerability in Web Services subcomponent, which allows...

9.8CVSS7.6AI score0.99977EPSS
SaveExploits37
zdt
zdt•added 2019/05/01 12:00 a.m.•411 views

Oracle #Weblogic 10.3.6.0.0 / 12.1.3.0.0 - Remote Code Execution Exploit #RCE

Exploit for windows platform in category web applications !/usr/bin/python Exploit Title: Oracle Weblogic Exploit CVE-2019-2725 Date: 30/04/2019 Exploit Author: Avinash Kumar Thapa Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Software Link:...

7.5CVSS7.7AI score0.99977EPSS
SaveExploits37
BDU FSTEC
BDU FSTEC•added 2019/04/30 12:00 a.m.•16 views

Oracle WebLogic Server Data Modification

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to lack of access control mechanisms. Exploiting this vulnerability allows an attacker to remotely modify, add, or delete data using the HTTP protocol...

5CVSS6.1AI score0.00811EPSS
SaveExploits0References2Affected Software1
exploitpack
exploitpack•added 2019/04/30 12:00 a.m.•555 views

Oracle Weblogic 10.3.6.0.0 12.1.3.0.0 - Remote Code Execution

Oracle Weblogic 10.3.6.0.0 12.1.3.0.0 - Remote Code Execution !/usr/bin/python Exploit Title: Oracle Weblogic Exploit CVE-2019-2725 Date: 30/04/2019 Exploit Author: Avinash Kumar Thapa Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Software Link:...

7.5CVSS7.7AI score0.99977EPSS
SaveExploits37
osv_cve
osv_cve•added 2019/04/26 7:29 p.m.•11 views

CVE-2019-2725

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.8CVSS7.4AI score0.99977EPSS
SaveExploits37References9
Prion
Prion•added 2019/04/26 7:29 p.m.•64 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS9.4AI score0.99977EPSS
SaveExploits37References8Affected Software8
Vulnrichment
Vulnrichment•added 2019/04/26 6:21 p.m.•30 views

CVE-2019-2725

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS7.4AI score0.99977EPSS
SaveExploits37References8
CVE
CVE•added 2019/04/26 6:21 p.m.•2027 views

CVE-2019-2725

CVE-2019-2725 is an Oracle WebLogic Server vulnerability (Web Services subcomponent) that allows unauthenticated, network-based remote code execution via HTTP. Affected versions include Oracle WebLogic Server 10.3.6.0.0 and 12.1.3.0.0. The root cause is deserialization of untrusted objects in Web...

9.8CVSS7.4AI score0.99977EPSS
SaveIn wildExploits37References9Affected Software8
Cvelist
Cvelist•added 2019/04/26 6:21 p.m.•54 views

CVE-2019-2725

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS9.6AI score0.99977EPSS
SaveExploits37References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2019/04/26 12:00 a.m.•6 views

CVE-2019-2725: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.8CVSS7.4AI score0.99977EPSS
SaveExploits37References16
attackerkb
attackerkb•added 2019/04/26 12:00 a.m.•315 views

CVE-2019-2725

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.8CVSS7.6AI score0.99977EPSS
SaveIn wildExploits37References10
Rows per page
Query Builder