Lucene search
+L

1528 matches found

NVD
NVD
added 2026/09/14 1:18 p.m.2 views

CVE-2026-77147

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

6.5CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 12:49 p.m.4 views

EUVD-2026-77457

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

6.5CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 12:49 p.m.6 views

CVE-2026-77147 Apache Syncope: Groovy Sandbox escape for empty CommandArgs

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

SaveExploits0References1
CVE
CVE
added 2026/09/14 12:49 p.m.3 views

CVE-2026-77147

CVE-2026-77147 is a code injection vulnerability in Apache Syncope 's Groovy security sandbox. An administrator with sufficient entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in the CommandArgs static implementation , bypassing the sandbox —...

6.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 11:23 a.m.4 views

Groovy-scripting-engine-CVE-2015-1427

ElasticSearch Groovy Sandbox Bypass && Code Execution Vulnerability CVE-2015-1427 Test Environment jre version: openjdk:8-jre elasticsearch version: v1.4.2 Principle Reference articles: http://cb.drops.wiki/drops/papers-5107.html...

9.8CVSS8.2AI score0.99906EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/14 7:15 a.m.7 views

Oracle-Identity-Manager-CVE-2025-61757

Oracle Identity Manager CVE-2025-61757 Vulnerability Detection Tool v2.2 🔥 Vulnerability Background Recently, Oracle Identity Manager was exposed to a severe remote code execution vulnerability CVE-2025-61757. Due to improper handling of request URIs in the SecurityFilter, attackers can bypass...

9.8CVSS7.8AI score0.88312EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 7:09 a.m.4 views

CVE-2025-24893

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Template Injection SSTI vulnerability via Groovy template injection in the SolrSearch endpoint. Vulnerability Type : Server-Side Template Injection SSTI Component : XWiki SolrSearch RSS feed Impact : Remote Code Execution Affected Version ...

9.8CVSS8.1AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/14 7:06 a.m.8 views

exploit-CVE-2015-1427

Elasticsearch 1.4.0 1.4.2 Remote Code Execution Elasticsearch is a distributed, RESTful search and analytics engine capable of solving a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data so you can discover the expected and uncover the unexpected...

9.8CVSS8.5AI score0.99906EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/14 6:33 a.m.8 views

jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25

Script Security Plugin User’s guide adapted from information on Template plugin in CloudBees Plugins guide Various Jenkins plugins require that users define custom scripts, most commonly in the Groovy language, to customize Jenkins’s behavior. If everyone who writes these scripts is a Jenkins...

8.8CVSS7.8AI score0.00585EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 5:06 a.m.6 views

CVE-2023-52251-POC

CVE-2023-52251-POC There is a Remote Code Execution vulnerability provectus/kafka-ui. There is no patch as of writing this, but the vendor is notified by us and the team over at VINCE without any response. Report was sent Sep 27, 2023 to provectus both via email and github security. Remediation W...

8.8CVSS7.8AI score0.8684EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/14 3:48 a.m.5 views

CVE-2025-24893

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC Vulnerability Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the...

9.8CVSS8AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/14 3:00 a.m.8 views

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...

9.8CVSS8AI score0.99864EPSS
SaveExploits52References1
Kitploit
Kitploit
added 2026/09/14 1:53 a.m.8 views

CVE-2024-32113-POC

Apache OfBiz vulns POC for CVE-2024-32113 The USERNAME and PASSWORD params can be provided at the /ecomseo/AnonContactus interface, which is publicly accessible to anyone. POC1:RCE root@kitploit: curl --noproxy '' -k --location --request POST...

9.8CVSS8.4AI score0.99442EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/14 1:43 a.m.5 views

CVE-2024-36104-PoC

CVE-2024-36104-PoC Proof-of-concept for CVE-2024-36104, an unauthenticated remote code execution vulnerability in Apache OFBiz before 18.12.14. OFBiz's ControlServlet resolves an unauthenticated view forgotPassword before canonicalizing the request path. Appending /%2e/%2e/ collapses back onto...

9.1CVSS8.3AI score0.87771EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/14 1:09 a.m.6 views

Ratpack-1

What is Ratpack? Ratpack is a simple, capable, toolkit for creating high performance web applications. Ratpack is built on Java and the Netty event-driven networking engine. The API is optimized for Groovy and Java 8. Optional Google Guice integration provides a foundation for scaling your...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 1:03 a.m.5 views

cve-2025-24893

CVE-2025-24893 XWiki RCE Exploit A simple Python3 script to exploit CVE-2025-24893 , a remote code execution vulnerability in XWiki Platform, using a Groovy-based async macro and a configurable reverse shell payload. ⚠️ WARNING: This tool is provided for educational and authorized testing purposes...

9.8CVSS8.1AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/13 11:49 p.m.8 views

CVE-2024-31982

CVE-2024-31982 Java SSTI - Lead to RCE root@kitploit: async async=falsegroovyprintln"Successful Injection"/groovy/ root@kitploit: GET...

10CVSS8.1AI score0.3428EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 11:28 p.m.4 views

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

9.8CVSS8.1AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/13 10:08 p.m.5 views

Ofbiz-RCE

📌 Apache OFBiz RCE Exploit CVE-2024-38856 This Python script allows exploiting a Remote Code Execution RCE vulnerability in Apache OFBiz versions 18.12.15 through unauthorized access to the endpoint /webtools/control/forgotPassword/ProgramExport. 🛠️ Description CVE : CVE-2024-38856 Type : Incorrec...

9.8CVSS8.5AI score0.99427EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 9:54 p.m.6 views

cve-2025-24893-poc

CVE-2025-24893 — RCE no autenticado en XWiki PoC Exploit de Prueba de Concepto para CVE-2025-24893 , una vulnerabilidad crítica de Ejecución Remota de Código no autenticada en XWiki. Este exploit abusa de una inyección de plantilla Groovy en el endpoint SolrSearch para ejecutar comandos arbitrari...

9.8CVSS8.1AI score0.99864EPSS
SaveExploits52
Rows per page
Query Builder