AEMPWN

AEMPWN AEM Forms Scanner per CVE-2025-54253 e CVE-2025-54254 AEMPWN è uno scanner mirato per identificare vulnerabilità ad alto rischio di Adobe Experience Manager AEM Forms, con supporto per rilevamento sicuro, conferma out-of-band OOB cieca e flussi di lavoro di validazione proof-of-concept PoC...

CVE-2025-54254

creationtimestamp| type| source ---|---|--- 2025-08-06 07:47:00+00:00| seen| https://t.me/HackerNewscyber/2294 2025-08-06 09:04:26+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lvpujzcr522s 2025-08-06 09:04:27+00:00| seen|...

CVE-2025-54254

CVE-2025-54254 affects Adobe Experience Manager, specifically versions 6.5.23 and earlier, due to an XML External Entity (XXE) handling flaw that can cause arbitrary file system reads. The issue arises from improper restriction of XML entities, enabling an attacker to read local files without use...

CVE-2025-54254 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...