Exploitation Summary
EIP tracks 6 public exploits for CVE-2014-4210. PoCs published by 0xn0ne, NoneNotNull, NHPT. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a WebLogic vulnerability scanner that checks for multiple CVEs, including CVE-2018-2628. It is a Python-based tool designed to detect vulnerabilities in Oracle WebLogic Server by sending crafted requests and analyzing responses.
Description
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services.
Exploits (6)
This repository contains a WebLogic vulnerability scanner that checks for multiple CVEs, including CVE-2018-2628. It is a Python-based tool designed to detect vulnerabilities in Oracle WebLogic Server by sending crafted requests and analyzing responses.
This repository contains a Python-based SSRF exploitation tool targeting CVE-2014-4210, which affects Oracle WebLogic Server. The tool supports host detection, port scanning, and shell acquisition via Redis unauthorized access.
This is a Python3-based exploit script for CVE-2014-4210, an SSRF vulnerability in Oracle WebLogic's SearchPublicRegistries.jsp. It allows scanning for open ports and detecting the vulnerability by sending crafted HTTP requests to the target.
The repository contains a Python script that scans for CVE-2014-4210 by sending crafted HTTP requests to a WebLogic server and checking for specific error responses. It does not include exploit code but detects vulnerable instances.
This is a functional PoC for CVE-2014-4210, an SSRF vulnerability in Oracle WebLogic. It uses an embedded Qt WebEngine to exploit the SSRF bug for port scanning remote hosts by checking responses from the UDDI explorer interface.
This repository contains a Python-based exploit for CVE-2014-4210, targeting Oracle WebLogic Server. The exploit combines SSRF, RCE via deserialization, and post-exploitation actions like ransomware deployment and AWS credential theft.
Nuclei Templates (1)
title:"Weblogic" || http.title:"weblogic" || http.html:"weblogic application server"
title="weblogic" || body="weblogic application server"