geoexplorer

GeoExplorer Client Dies ist die Client-Komponente des GeoExplorer-Projekts, die dazu dient, Anfragen an GeoServer-Instanzen zu senden und auf potenzielle Schwachstellen zu testen. Anforderungen Python 3.x Erforderliche Python-Pakete Installation mit pip install -r requirements.txt: requests...

CVE-2023-25157-checker

CVE-2023-25157-checker Uno script scritto in Golang. POC per CVE-2023-25157 Passaggi per l'uso 1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git 2. cd CVE-2023-25157-checker 3. go run CVE-2023-25157.go Sostituisci con l'URL del server di destinazione. Google Dork...

GeoServer-CVE-2024-36401

GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Vulnerabilità di esecuzione di codice remoto RCE nella valutazione delle espressioni dei nomi delle proprietà GetPropertyValue root@kitploit: POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0...

geoserver-

Ferramenta de exploração da vulnerabilidade CVE-2024-36401 no GeoServer geoserver CVE-2024-36401 Ambiente: JDK8 Aviso: Apenas para testes autorizados. O autor não se responsabiliza por quaisquer consequências decorrentes do uso indevido. Por favor, cumpra as leis e regulamentos! 1, Payload padrão...

CVE-2024-36401

CVE-2024-36401 Ferramenta de Exploração de Vulnerabilidade GeoServer Resumo da Vulnerabilidade CVE-2024-36401 é uma vulnerabilidade de execução remota de comandos no GeoServer, onde um atacante pode executar comandos arbitrários sem autorização ao construir solicitações WFS Web Feature Service...

geoserver-CVE-2023-25157

geoserver CVE-2023-25157 Kim Jeong-woo, 30B White Hat 3rd Generation Link GitHub - https://github.com/custiya/geoserver-CVE-2023-25157 Riepilogo della vulnerabilità CVE-2023-25157 è una vulnerabilità SQLi che colpisce GeoServer, un'applicazione web open source per servizi di dati cartografici Si...

GeoServer WFS - XXE Processing Vulnerability

GeoServer Web Feature Service WFS is vulnerable to an XML External Entity XXE processing attack due to improper handling of XML input. This vulnerability allows attackers to perform Out-of-Band OOB data exfiltration and Server-Side Request Forgery SSRF by exploiting the GeoTools library. id:...

CVE-2023-25157-GeoServer-SQLi-Lab

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — Labor für Sicherheitslücken & PoC-Bericht Übungsumgebung Vulnerable Lab und detaillierter Exploit-Analysebericht der SQL Injection Error-based -Sicherheitslücke in GeoServer CVE-2023-25157 und der Bibliothek GeoTools...

CVE-2023-29804

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the syssmbpwdmod function...

EUVD-2017-14626

Malware in sbrugna...

EUVD-2025-17815

Malicious code in bioql PyPI...

EUVD-2023-33343

Malicious code in bioql PyPI...

GHSA-2P76-GC46-5FVC GeoNetwork affected by XML External Entity (XXE) processing vulnerability in WFS indexing REST API endpoint

Impact GeoNetwork WFS Index functionality is affected by GeoTools XML External Entity XXE vulnerability during schema validation. This vulnerability is particularly severe as the REST API endpoint was not secured, potentially allowing unauthenticated attackers to read sensitive files Patches...

GHSA-JJ54-8F66-C5PC [XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service

Summary GeoServer Web Feature Service WFS web service was found to be vulnerable to GeoTools CVE-2025-30220 XML External Entity XXE processing attack. It is possible to trigger the parsing of external DTDs and entities, bypassing standard entity resolvers. This allows for Out-of-Band OOB data...

CVE-2025-30220

GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity XXE exploit. This impacts whoever exposes XML processing with gt-xsd-core involved in...

PT-2025-26488 · Maven · Org.Geonetwork-Opensource:Gn-Web-App +1

Impact GeoNetwork WFS Index functionality is affected by GeoTools XML External Entity XXE vulnerability during schema validation. This vulnerability is particularly severe as the REST API endpoint was not secured, potentially allowing unauthenticated attackers to read sensitive files Patches...

PT-2025-26262 · Maven · Org.Geotools:Gt-Wfs-Ng +1

Summary GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity XXE exploit. Impact This impacts whoever exposes XML processing with gt-xsd-core involved in parsing, when the documents carry a reference to an external XML schema. Th...

CVE-2023-29805

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the prostorcanceltranshandlerpart19 function...

Exploit for Code Injection in Geoserver

CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...

CVE-2024-36401

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer...