CVE-2025-24893

CVE-2025-24893 XWiki 원격 코드 실행 RCE 익스플로잇 CVE-2025-24893 에 대한 Python3 익스플로잇입니다. 이는 XWiki 플랫폼에 영향을 미치는 중요한 인증되지 않은 원격 코드 실행RCE 취약점입니다. 이 스크립트는 SolrSearch 매크로 구성 요소 내의 코드/표현식 인젝션 취약점CWE-95을 익스플로잇합니다. 이 결함으로 인해 공격자는 기본 운영 체제에서 임의의 Groovy/Java 코드를 실행할 수 있습니다. 이 익스플로잇은 Java의 Runtime.getRuntime.exec 함수의 ...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - 원격 코드 실행 비인증 공격자가 사전 인증이나 접근 권한 없이 Guest User 원격으로 임의의 Groovy 코드를 실행할 수 있는 RCERemote Code Execution 범주의 취약점입니다. 이 취약점을 악용하기 위한 Python 기반 PoCProof-Of-Concept입니다. 설치. 1. 저장소를 로컬 머신에 클론하세요. git clone https://github.com/zs1n/CVE-2025-24893 2. 익스플로잇을...

XWiki-Platform-RCE-CVE-2025-24893

XWiki 플랫폼 인증되지 않은 원격 코드 실행 익스플로잇 개요 이 스크립트는 CVE-2025-24893의 영향을 받는 XWiki Platform 버전을 대상으로 하는 익스플로잇의 Bash 구현을 재구성한 것입니다. SolrSearch 매크로의 템플릿 주입 결함을 통해 인증되지 않은 공격자가 임의의 Groovy 코드를 실행할 수 있는 치명적인 취약점을 활용합니다. 원래 Python 기반의 익스플로잇 구현은 여러 보안 연구자가 제작했으며, 여기서는 간소화된 실행 및 향상된 사용성을 위해 Bash 사용자에 맞게 조정되었습니다. 취...

CVE-2026-52833

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a build.gradle file during function builds using Go's text/template package. The template renders runtimeAttributes.repositories values with the . action, which...

PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)

This module exploits an authentication bypass in PaperCut NG and MF. A crafted Apache Tapestry complex-direct request invokes privileged ConfigEditor components through the public Home page. On version 26, the module reconfigures external user lookup to use an H2 JDBC URL whose initialization SQL...

CVE-2026-42049

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

EUVD-2026-44534

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

CVE-2026-42049

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

PT-2026-58853

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

CVE-2026-42049: Improper Control of Generation of Code

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

Exploit for Code Injection in Xwiki

CVE-2025-24893 Exploit de Execução Remota de Código RCE no X...

CVE-2026-46586

Apache OFBiz versions prior to 24.09.06 are vulnerable to Code Injection and Eval Injection due to improper control of code generation and improper neutralization of directives in dynamically evaluated code. Specifically, the traverseContent service fails to properly validate inputs, which can al...

CVE-2019-20155

An issue was discovered in reportedit.jsp in Determine formerly Selectica Contract Lifecycle Management CLM v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server...

Exploit for Code Injection in Xwiki

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit for Reve...

CVE-2025-64133: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attackers to execute sandboxed Groovy code...

EUVD-2019-10710

Malware in sbrugna...

PT-2025-42765

Name of the Vulnerable Software and Affected Versions Apache Syncope versions 3.0.0 through 3.0.13 Apache Syncope versions 4.0.0 through 4.0.1 Description Apache Syncope allows a malicious administrator to inject Groovy code that can be executed remotely by a running Apache Syncope Core instance...

PT-2024-13997 · Janitza · Gridvis

Name of the Vulnerable Software and Affected Versions: Janitza GridVis versions 9.0.66 and earlier Description: The issue allows remote authenticated administrative users to execute arbitrary Groovy code due to exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject...

PT-2023-22295 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 13.10.11 XWiki Platform versions prior to 14.4.8 XWiki Platform versions prior to 14.10.1 XWiki Platform versions prior to 15.0-rc-1 Description: The issue allows any user with edit rights on a page to execute...

CVE-2023-29211 org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights WikiManager.DeleteWiki can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the wiki...