Lucene search
+L

3123 matches found

Kitploit
Kitploit
•added 2026/09/24 3:01 p.m.•10 views

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner A remote attacker can construct a special HTTP request to take over the WebLogic Server Console without authentication. Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner cmd...

9CVSS8.4AI score0.97929EPSS
SaveExploits8References1
Kitploit
Kitploit
•added 2026/09/24 1:57 p.m.•6 views

CVE-2017-10271

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Writeup I. System Analysis System Log Analysis Detected Service: Oracle WebLogic Server AdminServer belonging to basedomain running in Development Mode. Connection Port: 7001. Supported Protocols: http, t3, iiop, ldap, snmp. Attack Surfa...

7.5CVSS8.7AI score0.9999EPSS
SaveExploits45
Kitploit
Kitploit
•added 2026/09/24 1:55 p.m.•11 views

CVE-2020-14882

CVE-2020-14882 This script enables remote code execution RCE on Oracle WebLogic Server using an unauthenticated GET request. It exploits the vulnerability CVE-2020-14882. By executing arbitrary commands, an attacker can gain unauthorized access to the server. Exploit Details Exploit Title: Oracle...

10CVSS9AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/24 12:55 p.m.•9 views

ysoserial-cve-2018-2628

ysoserial-cve-2018-2628 0x1. Preparation Prepare the software environment required for POC script, Payload Object generation, and JRMPListener execution Python 2.7.x Oracle Java SE 1.7+ Prepare a WebLogic Server 10.3.6 environment with Patch Set Update 180417 installed AdminServer only is...

9.8CVSS8.6AI score0.99959EPSS
SaveExploits70References1
Kitploit
Kitploit
•added 2026/09/24 11:58 a.m.•9 views

CVE-2020-14882

CVE-2020-14882 CVE-2020–14882 - research by Jang Code by @s1kr10s Poc: POST Review / Video: root@kitploit: https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf https://www.youtube.com/watch?v=JFVDOIL0YtA&feature=youtu.be...

10CVSS8.8AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•9 views

CVE-2021-2109

CVE-2021-2109 Weblogic Server Remote Code Execution Vulnerability Reproduction and Analysis In January 2021, Oracle released a security update patch, including 329 new security patches in the Oracle product family. This announcement specifically mentioned the Oracle WebLogic Server security...

7.2CVSS7.8AI score0.70447EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/24 9:29 a.m.•12 views

CVE-2020-2551

CVE-2020-2551 Weblogic RCE with IIOP 0x01 Default Enable IIOP 0x02 Poc Demo...

9.8CVSS8.7AI score0.93217EPSS
SaveExploits19
Kitploit
Kitploit
•added 2026/09/24 8:34 a.m.•12 views

POC-CVE-2026-60206

CVE-2026-60206 — Oracle WebLogic SAML Auth Bypass CVSS 9.9 — SAML authentication bypass in Oracle WebLogic Server Core. Affected: 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 15.1.1.0.0 ⚠️ Authorized security testing only. Install root@kitploit: git clone https://github.com/imbas007/CVE-2026-60206.git cd...

9.9CVSS6.5AI score0.00987EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 7:28 a.m.•7 views

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T...

7.5CVSS7AI score0.07854EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/24 5:55 a.m.•10 views

CVE-2024-21182

Oracle WebLogic Server JNDI Vulnerability For educational purpose only...

7.5CVSS7.6AI score0.74162EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 5:21 a.m.•8 views

cve-2020-14882

CVE-2020-14882 Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 POC: root@kitploit: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';";...

10CVSS8.8AI score0.99997EPSS
SaveExploits42References1
Kitploit
Kitploit
•added 2026/09/24 4:08 a.m.•6 views

CVE-2018-2628

CVE-2018-2628 0x01 Nessus Scan 0x02 K8 Tools GetShell 0x03 CMD Query Use-Method: root@kitploit: python cve-2018-2628.py set url :http://xx.xx.xx.xx:8001/beawlsinternal/wlscmd.jsp cmd : whoami win-xxx8cb989qh\administrator cmd : net user \WIN-XXX8CB989QH 的用户帐户...

9.8CVSS8.8AI score0.99959EPSS
SaveExploits70
Kitploit
Kitploit
•added 2026/09/24 3:31 a.m.•10 views

CVE-2020-14882-weblogicRCE

Detection of RCE in Oracle's "WebLogic Server" CVE-2020-14882 / CVE-2020-14750 Summary: Detection of attempts to exploit CVE-2020-14882 and CVE-2020-14750 - Unauthenticated RCE in Oracle's Weblogic Server. References: Oracle's advisories: CVE-2020-14882...

10CVSS8.6AI score0.99997EPSS
SaveExploits44
Kitploit
Kitploit
•added 2026/09/24 3:19 a.m.•11 views

CVE-2019-2615

CVE-2019-2615 GET /beawlsmanagementinternal2/wlmanagement HTTP/1.1 Host: 192.168.5.137:7001 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:66.0 Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/ ;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encodin...

4.9CVSS6.4AI score0.05464EPSS
SaveExploits0
Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•57 views

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

9.8CVSS8.1AI score0.08438EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/23 11:35 p.m.•10 views

CVE-2020-14882

CVE-2020–14882 Weblogic Unauthorized bypass RCE bypass patch with CVE-2020–14882 private static final String IllegalUrl = new String";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", ""; list root@kitploit: %252E%252E %2E%2E .. %3E %3C ; lower root@kitploit: "%252E%252E%252F".lower '%252e%252e%252f...

10CVSS8.8AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/23 11:08 p.m.•8 views

CVE-2024-21182

Oracle WebLogic Server JNDI Vulnerability...

7.5CVSS7.6AI score0.74162EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/23 10:31 p.m.•6 views

CVE-2020-14882

CVE-2020-14882 Deployment of Behinder Memory Shell As we all know, CVE-2020-14882 is an unauthenticated vulnerability that allows an attacker to execute arbitrary code on affected WebLogic Server instances. The publicly available PoCs bypass access using illegal characters and then execute comman...

10CVSS9.2AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/23 10:11 p.m.•16 views

CVE-2022-21350

Why two POCs? One with com.51pwn.hktalent.CreatJar.mainargs; is used to create the minimal payload generation tool. After creation, use the other one. Running CVE-2022-21350powerBy51pwn.jar to build the payload, errors do not affect the use of the payload. other exp root@kitploit: CVE20202551...

6.5CVSS7.1AI score0.03618EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/23 9:46 p.m.•9 views

CVE-2020-14882

CVE-2020-14882 Oracle WebLogic Server Authentication Bypass Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0and 14.1.1.0.0. Easily exploitable vulnerability...

10CVSS8.4AI score0.99997EPSS
SaveExploits42
Rows per page
Query Builder