yukselberkay

2 exploits Active since Dec 2023

CVE-2023-49070 NOMISEC CRITICAL WORKING POC

Apache OFBiz < 18.12.10 - Unauthenticated Remote Code Execution via XML-RPC

Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10

1 stars

CVSS 9.8

View Code

CVE-2023-51467 VULNCHECK_XDB CRITICAL WORKING POC

Apache OFBiz XML-RPC Java Deserialization

The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

CVSS 9.8

View Code