Exploit for Eval Injection in Xwiki

CVE-2025-24893 - XWiki SolrSearch SSTI to unauthenticated RCE...

Exploit for Code Injection in Xwiki

CVE-2025-24893 Exploit de Execução Remota de Código RCE no X...

Exploit for Code Injection in Xwiki

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview...

Exploit for Code Injection in Xwiki

XWiki Platform Unauthenticated RCE Exploit Overview This s...

Exploit for Code Injection in Xwiki

Description: XWiki Platform is a generic wiki platform offering...

Exploit for Code Injection in Xwiki

Description: XWiki Platform is a generic wiki platform offering...

📄 XWiki Platform 15.10.10 Remote Command Execution

XWiki Platform version 15.10.10 suffers from a critical unauthenticated remote command execution vulnerability through the SolrSearch endpoint. The issue is patched in versions 15.10.11, 16.4.1, and 16.5.0RC1...

Exploit for Code Injection in Xwiki

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit for Reve...

About Remote Code Execution – XWiki Platform (CVE-2025-24893) vulnerability

About Remote Code Execution - XWiki Platform CVE-2025-24893 vulnerability. XWiki is a free and open-source wiki platform written in Java, with a strong focus on extensibility. It supports WYSIWYG visual editing, importing and exporting documents in OpenDocument format, adding annotations and tags...

XWiki Platform Eval Injection Vulnerability

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch...

Exploit for Code Injection in Xwiki

CVE-2025-24893 - XWiki Remote Code Execution via SolrSearch SS...

Exploit for Code Injection in Xwiki

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Tem...

📄 XWiki Platform Remote Code Execution

This Metasploit module exploits a template injection vulnerability in the the XWiki Platform. XWiki includes a macro called SolrSearch defined in Main.SolrSearchMacros that enables full-text search through the embedded Solr engine. The vulnerability stems from the way this macro evaluates search...

Exploit for Code Injection in Xwiki

solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CV...

Exploit for Code Injection in Xwiki

CVE-2025-24893 - XWiki Unauthenticated Remote Code Execution...

Exploit for Code Injection in Xwiki

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC...

Exploit for Code Injection in Xwiki

CVE-2025-24893 – Unauthenticated Remote Code Execution in XWik...

Exploit for Code Injection in Xwiki

XWiki CVE-2025-24893 Proof of Concept Authors: Net.Doge...

XWiki Platform SolrSearch Macro Remote Code Execution

XWiki Platform versions from 5.3-milestone-2 before 15.10.11 and from 16.0.0-rc-1 before 16.4.1 suffer from a Server-Side Template Injection SSTI due to the lack of sanitization of the SolrSearch Macro requests. By leveraging this vulnerability, a remote and unauthenticated attacker can achieve...

XWiki Platform 15.10.10 - Remote Code Execution

Exploit Title: XWiki Platform - Remote Code Execution Exploit Author: Al Baradi Joy Exploit Date: April 6, 2025 CVE ID: CVE-2025-24893 Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: Affected versions up to and including XWiki 15.10.10 Teste...