GitHub

某weblogic的T3反序列化0day分析.md

当然，weblogic 12已经不支持在jdk版本低于1.8的jdk下运行。 我们可以很明显的看到，这个是反序列化gadgets中7u21的变种。唯一不同的是com.sun.org.apache.xalan.internal.xsltc.trax被用java.rmi.MarshalledObject代替。
GitHub

GitHub - atlassion/Weblogic-1: Weblogic Serialization Vulnerability · GitHub

RMI-IIOP is a way of implementing the Java remote method invocation (RMI) protocol, which extends the IIOP protocol with the functionality of remote calling Java objects through RMI. In simple terms, ...

CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited

CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed servers.
TheServerSide

What is Remote Method Invocation (RMI)?

Remote Method Invocation (RMI) is an application programming interface (API) in the Java programming language and development environment. It allows objects on one computer or Java Virtual Machine ...