admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 18:52:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2018/CVE-2018-2893.md

119 lines
5.7 KiB
Markdown
Raw Normal View History

Update Sun May 26 14:27:04 CEST 2024
2024-05-26 14:27:05 +02:00
### [CVE-2018-2893](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2893)
![](https://img.shields.io/static/v1?label=Product&message=WebLogic%20Server&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%2010.3.6.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Easily%20exploitable%20vulnerability%20allows%20unauthenticated%20attacker%20with%20network%20access%20via%20T3%20to%20compromise%20Oracle%20WebLogic%20Server.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20WebLogic%20Server.&color=brighgreen)
### Description
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
### POC
#### Reference
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/0xn0ne/weblogicScanner
- https://github.com/1o24er/RedTeam
- https://github.com/20142995/pocsuite3
- https://github.com/20142995/sectool
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ARPSyndicate/kenzer-templates
- https://github.com/AdeliaNitzsche/Java-Deserialization-Cheat-Sheet
- https://github.com/Al1ex/Red-Team
- https://github.com/Apri1y/Red-Team-links
- https://github.com/BrittanyKuhn/javascript-tutorial
- https://github.com/Bywalks/WeblogicScan
- https://github.com/CVEDB/PoC-List
- https://github.com/CVEDB/awesome-cve-repo
- https://github.com/CVEDB/top
- https://github.com/Echocipher/Resource-list
- https://github.com/GhostTroops/TOP
- https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
- https://github.com/Harmoc/CTFTools
- https://github.com/Hatcat123/my_stars
- https://github.com/JERRY123S/all-poc
- https://github.com/KimJun1010/WeblogicTool
- https://github.com/MacAsure/WL_Scan_GO
- https://github.com/Micr067/CMS-Hunter
- https://github.com/MrSyst1m/weblogic
- https://github.com/Ondrik8/RED-Team
- https://github.com/PalindromeLabs/Java-Deserialization-CVEs
- https://github.com/ParrotSec-CN/ParrotSecCN_Community_QQbot
- https://github.com/SecWiki/CMS-Hunter
- https://github.com/SexyBeast233/SecBooks
- https://github.com/Weik1/Artillery
Update Mon May 27 13:12:02 UTC 2024
2024-05-27 13:12:02 +00:00
- https://github.com/ZTK-009/RedTeamer
Update Sun May 26 14:27:04 CEST 2024
2024-05-26 14:27:05 +02:00
- https://github.com/aiici/weblogicAllinone
- https://github.com/angeloqmartin/Vulnerability-Assessment
Update CVE sources 2024-05-28 00:32
2024-05-28 00:32:59 +00:00
- https://github.com/artofwar344/CVE-2018-2893
Update Sun May 26 14:27:04 CEST 2024
2024-05-26 14:27:05 +02:00
- https://github.com/awake1t/Awesome-hacking-tools
- https://github.com/awsassets/weblogic_exploit
- https://github.com/bigsizeme/CVE-2018-2893
- https://github.com/cross2to/betaseclab_tools
- https://github.com/cyberanand1337x/bug-bounty-2022
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/djytmdj/Tool_Summary
- https://github.com/dk47os3r/hongduiziliao
- https://github.com/dr0op/WeblogicScan
- https://github.com/drizzle888/CTFTools
- https://github.com/fengjixuchui/RedTeamer
- https://github.com/followboy1999/weblogic-deserialization
- https://github.com/forhub2021/weblogicScanner
- https://github.com/hanc00l/some_pocsuite
- https://github.com/hanc00l/weblogic_unserialize_exploit
- https://github.com/hasee2018/Safety-net-information
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/hktalent/TOP
- https://github.com/hmoytx/weblogicscan
- https://github.com/hudunkey/Red-Team-links
- https://github.com/ianxtianxt/CVE-2018-2893
- https://github.com/ianxtianxt/CVE-2018-3245
- https://github.com/iceberg-N/WL_Scan_GO
- https://github.com/jas502n/CVE-2018-2893
- https://github.com/jas502n/CVE-2018-3245
- https://github.com/jbmihoub/all-poc
- https://github.com/john-80/-007
- https://github.com/koutto/jok3r-pocs
- https://github.com/landscape2024/RedTeam
- https://github.com/lnick2023/nicenice
- https://github.com/lp008/Hack-readme
- https://github.com/mishmashclone/GrrrDog-Java-Deserialization-Cheat-Sheet
- https://github.com/nihaohello/N-MiddlewareScan
- https://github.com/nobiusmallyu/kehai
- https://github.com/oneplus-x/jok3r
Update CVE sources 2024-07-25 21:25
2024-07-25 21:25:12 +00:00
- https://github.com/onewinner/VulToolsKit
Update Sun May 26 14:27:04 CEST 2024
2024-05-26 14:27:05 +02:00
- https://github.com/password520/RedTeamer
- https://github.com/pyn3rd/CVE-2018-2893
- https://github.com/pyn3rd/CVE-2018-3245
- https://github.com/qazbnm456/awesome-cve-poc
- https://github.com/qi4L/WeblogicScan.go
- https://github.com/qianl0ng/CVE-2018-2893
Update CVE sources 2024-06-07 04:52
2024-06-07 04:52:01 +00:00
- https://github.com/rabbitmask/WeblogicScan
Update Sun May 26 14:27:04 CEST 2024
2024-05-26 14:27:05 +02:00
- https://github.com/rabbitmask/WeblogicScanLot
Update CVE sources 2024-07-25 21:25
2024-07-25 21:25:12 +00:00
- https://github.com/rabbitmask/WeblogicScanServer
Update Sun May 26 14:27:04 CEST 2024
2024-05-26 14:27:05 +02:00
- https://github.com/ryanInf/CVE-2018-2893
- https://github.com/safe6Sec/WeblogicVuln
- https://github.com/shengqi158/CVE-2018-2628
- https://github.com/slimdaddy/RedTeam
- https://github.com/soosmile/cms-V
- https://github.com/sp4zcmd/WeblogicExploit-GUI
- https://github.com/sry309/CVE-2018-2893
- https://github.com/svbjdbk123/-
- https://github.com/todo1024/1657
- https://github.com/tomoyamachi/gocarts
- https://github.com/trganda/starrlist
- https://github.com/twensoo/PersistentThreat
- https://github.com/weeka10/-hktalent-TOP
- https://github.com/whoadmin/pocs
- https://github.com/wr0x00/Lizard
- https://github.com/wr0x00/Lsploit
- https://github.com/xbl3/awesome-cve-poc_qazbnm456
- https://github.com/xiaoZ-hc/redtool
- https://github.com/yige666/CMS-Hunter
- https://github.com/yut0u/RedTeam-BlackBox
- https://github.com/zema1/oracle-vuln-crawler
- https://github.com/zzwlpx/weblogic
Reference in New Issue Copy Permalink