https://db.gcve.eu/sightings/feed 2026-05-03T23:56:59.896484+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/5efd294e-e3f3-4188-9f6f-c02ef805059b/export 2026-05-03T23:57:00.223505+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "5efd294e-e3f3-4188-9f6f-c02ef805059b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-40571", "type": "seen", "source": "https://t.me/cibsecurity/69222", "content": "\u203c CVE-2023-40571 \u203c\n\nweblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the data returned by the server without verifying it. At the same time, the classloader loads a lot of deserialization calls. In this case, the malicious serialized data returned by the server will cause remote code execution. Version 0.2.4 contains a patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-26T00:14:40.000000Z"} 2023-08-26T00:14:40+00:00