CVE-2020-14882-WebLogic

CVE-2020-14882 WebLogic Connect with me: Check YouTube - https://youtu.be/O0ZnLXRY5Wo Screenshot:...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Weblogic SearchPublicRegistries SSRFCVE-2014-4210 Exploit Script based on Python3 Usage optional arguments: -h, --help show this help message and exit -u U Single Target URL -uf UF Read URLs from file -p P Only scan specified ports -sn SN Only scan specified subnets -sf...

weblogic-cve-2018-2628

This repository does not have a README...

WebLogic_CNVD_C_2019_48814

WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan By 7kbstorm...

JavaUnserializeExploits

JavaUnserializeExploits Python scripts and HTTP request referenced in the blog post What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability at http://foxglovesecurity.com...

CVE-2019-2888

CVE-2019-2888 Vulnerabilidad XXE en WebLogic EJBTaglibDescriptor https://www.oracle.com/security-alerts/cpuoct2019.html fernflower.jar weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class root@kitploit: ╭─root@jas502n /var ╰─ find ./ |grep EJBTaglibDescriptor  ✔  8388  18:32:43...

oracle-weblogic-CVE-2021-2109

oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...

CVE-2024-21182

CVE-2024-21182 — Oracle WebLogic Server T3/IIOP JNDI Injection → RCE lab A self-contained, one-command Docker lab to reproduce and validate the Oracle WebLogic Server OpaqueReference JNDI-injection vulnerability family CVE-2024-21182, a patch bypass of CVE-2023-21839 and turn it into...

CVE-2018-2628-MultiThreading

WebLogic WLS Core Component Deserialization Vulnerability CVE-2018-2628 Usage: Place the 'ip:port' to be detected into the url.txt file in the same directory. Then run: Modify the thread count at line 93 of code python CVE-2018-2628-MultiThreading.py Usage: Place the 'ip:port' to be detected into...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic unauthorized access leading to arbitrary file upload/RCE vulnerability check script...

POC-CVE-2026-60206

CVE-2026-60206 — Oracle WebLogic SAML Auth Bypass CVSS 9.9 — SAML authentication bypass in Oracle WebLogic Server Core. Affected: 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 15.1.1.0.0 ⚠️ Authorized security testing only. Install root@kitploit: git clone https://github.com/imbas007/CVE-2026-60206.git cd...

CVE-2020-2551

CVE-2020-2551 Weblogic RCE with IIOP 0x01 Default Enable IIOP 0x02 Poc Demo...

CVE-2017-10271

CVE-2017-10271 WebLogic wls-wsat component deserialization vulnerability CVE-2017-10271 detection script Usage root@kitploit: $ python CVE-2017-10271 url You also need to register an account on ceye.io, and fill in the Identifier and API Token provided by it in the following part of the code:...

CVE-2020-14882-weblogicRCE

Detection of RCE in Oracle's "WebLogic Server" CVE-2020-14882 / CVE-2020-14750 Summary: Detection of attempts to exploit CVE-2020-14882 and CVE-2020-14750 - Unauthenticated RCE in Oracle's Weblogic Server. References: Oracle's advisories: CVE-2020-14882...

weblogic_2019_2725_wls_batch

weblogic20192725wlsbatch Exp de la vulnerabilidad weblogic CVE-2019-2725, dirigido a la vulnerabilidad del componente wls-wsat, utilizando tres exp para detección por lotes. En ese momento no pensé demasiado, solo verificar si la vulnerabilidad existía, así que la función del script es generar el...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows...

weblogic-cve-2018-2628

weblogic-cve-2018-2628 weblogic-cve-2018-2628-exp python2 weblogic-cve-2018-2628-exp.py targetip targetport ysoserial-0.1-cve-2018-2628-all.jar bindip bindport JRMPClient python weblogic-cve-2018-2628-exp.py weblogic-server 7001 ysoserial-0.1-cve-2018-2628-all.jar hacker-server 2333 JRMPClient ja...

weblogic_wls_wsat_rce

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....

CVE-2020-2551

CVE-2020-2551 Weblogic IIOP Deserialization Test Environment Weblogic10.3.6+jdk1.6 Packaged jar file Extraction code: a6ob Exploit Download the jar package, then use marshalsec to start a malicious RMI service, compile a local exp.java root@kitploit: package payload; import java.io.IOException;...

CVE-2026-60206

🚨 CVE-2026-60206 — WebLogic SAML Takeover Oracle WebLogic Server SAML Authentication Vulnerability A technical analysis of CVE-2026-60206 affecting Oracle WebLogic Server. 📖 Overview CVE-2026-60206 is a Critical CVSS 9.9 vulnerability affecting Oracle WebLogic Server. According to Oracle, a...