CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 ペイロードビルダー & エクスプロイト 情報 / ヘルプ $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal Exploit | | CVE-2017-3506 /...

CVE-2019-0604

一、k8gegeのcve-2019-0604-exp.pyを解説 k8gegeのスクリプト https://github.com/k8gege/CVE-2019-0604 正直言って、k8gegeのpyスクリプトは少し派手で、大量の16進数文字列があり、payload1,2,3に分かれています。悪質ですね。 pythonスクリプトがリモートPOSTするpayloadは、逆シリアル化後にXMLデータボディになります。 cmd /c echo ^%@ Page Language="Jscript" %^^%var pwd="tom";var uastr=Request.UserAgent;i...

CVE-2022-45047

CVE-2022-45047 POC、EXP、私のためのchatGPT コード import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding": "gzip, deflate" da...

CVE-2021-42237

CVE-2021-42237 这是针对 CVE-2021-42237 的漏洞利用/PoC，来源于：Assetnote 报告 免责声明：我与 Assetnote 没有任何关联。此内容仅供教育目的使用。 请确保替换下方 PoC 中的 CMD-COMMAND-HERE 以及 Host： POST /sitecore/shell/ClientBin/Reporting/Report.ashx HTTP/1.1 Host: sitecore.local Accept-Encoding: gzip, deflate Accept: / Accept-Language: en User-Agent:...

CVE-2025-59287

CVE-2025-59287 WSUS CVE-2025-59287 – XML 反序列化 RCE（反向 Shell） 一个针对 WSUS CVE-2025-59287 的聚焦 PoC，通过 XML 反序列化实现 Windows 反向 Shell。此脚本仅支持反向 Shell 载荷（无 calc 回退）。 目标：安装了 WSUS 角色的 Windows Server 技术：SOAP + ObjectDataProvider 反序列化 结果：cmd.exe 启动 PowerShell 反向 Shell 连接到你的监听器 免责声明 仅限在实验室环境中进行授权测试。你有责任遵守所有适用法律。 ...

Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 脆弱性の説明 初期には、ハッカーがWebLogic WLSコンポーネントの脆弱性を利用して企業サーバーに対して大規模なリモート攻撃を仕掛け、多くの企業のサーバーが侵害され、攻撃を受けた企業数は明らかな増加傾向を示しており、高度な警戒が必要です。その中で、CVE-2017-3506はOracle...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Apache ActiveMQ RCE 概念実証 課題: SSP Assignment 3 チーム: RCE You Later メンバー: Banica Horia Alexandru, Comarlau Vlad-Constantin このリポジトリを使用してPoCを実行する様子のビデオリンク: https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 概要 このリポジトリには、CVE-2023-46604 に対する完全に機能する概念実証 PoC が含まれています。 この脆弱性により、攻撃者は脆弱なApache...

struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 XMLデシリアライゼーションRCE このリポジトリは、悪意のあるXMLデシリアライゼーションを利用したApache Struts S2-052 CVE-2017-9805のエクスプロイトを示しています。 このエクスプロイトは、INE eWPTX Practice Range – Struts XML Deserialization RCEラボ を解く際に作成されました。 脆弱性の概要 Apache Struts RESTプラグインは、XStream を使用してXMLリクエストをデシリアライズします。 アプリケーションが以下のXMLを処理する場合：...

S2-052

CVE-2017-9805 （S2-052）リバースシェル Exploit 影響バージョン Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12 Poc Content-Type: application/xml 0 false 0 calc false java.lang.ProcessBuilder start foo foo false 0 0 false false 0 jdk.nashorn.internal.objects.NativeString refe...

BIT-JENKINS-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

PT-2026-88163

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

The Jenkins automation server is vulnerable in versions 2.579 and earlier (and LTS 2.568.2 and earlier ). An attacker with Overall/Read permission can exploit a flaw where user objects appear as nested field values in other deserialized XML objects. By submitting crafted XML , the attacker can cr...

EUVD-2026-70112

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

PT-2026-84769

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

ROS-20260812-73-0037

The vulnerability of the XStream library used by Jenkins automation servers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to replace HTTP requests, gain unauthorized access to the Script Console, execute arbitrary code, or...

RHCOS 4 : OpenShift Container Platform 4.6.17 (RHSA-2021:0423)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0423 advisory. - ant: insecure temporary file vulnerability CVE-2020-1945 - ant: insecure temporary file CVE-2020-11979 - jenkins: Arbitrary file...