CVE-2025-58360

CVE-2025-58360 在版本 2.26.0 至 2.26.2 之前以及 2.25.6 之前，发现了一个 XML 外部实体（XXE）漏洞。应用程序通过特定端点 /geoserver/wms 的 GetMap 操作接受 XML 输入。 利用1: root@kitploit: python3 CVE-2025-58360 -u http://example.com 利用2: root@kitploit: curl -X POST...

Bypass-CVE-2025-58360

During my geoserver analysis I found another way to attack unauthenticated XML External Entities XXE via WMS GetMap operation. We can call this vulnerability via /geoserver/workspaces/ows, by using OWS call to WMS service instead of calling WMS service directly via /geoserver/wms as shown below...

Blackash-CVE-2025-58360

🔓 🛰️ 'CVE-2025-58360' GeoServer WMS 端点易受 XXE 攻击 🌟 🏷️ 基本信息 CVE ID : CVE-2025-58360 发布时间 : 📅 2025年11月25日 最后修改 : 📅 2025年11月25日（截至11月26日仍为最新） 漏洞类型 : XML 外部实体 XXE – CWE-611 受影响软件 : GeoServer（用 Java 编写的开源地理空间服务器） 严重性 : 🔥 高 – CVSS v3.1 基础评分 7.5 向量: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L 野外利用情况 : 🟡...

CVE-2025-58360-GeoServer-XXE

CVE-2025-58360：GeoServer XXE 实验环境 GeoServer OWS/WMS 服务中未经身份验证的 XML 外部实体 XXE 注入漏洞 CVSS: 9.8 严重 受影响版本: SLDHandler.parse | | - SLDParser.parseSLD | 文件泄露/SSRF 快速开始 root@kitploit: 启动易受攻击和已修复的两个实例 docker-compose up -d 易受攻击实例: http://localhost:8080/geoserver 已修复实例: http://localhost:8081/geoserver 等待约 60...

PoC-CVE-2024-44349

PoC-CVE-2024-44349 漏洞发现并测试于 Anteeo WMS - v4.7.31 该漏洞允许威胁行为者在用户名参数中构造SQL命令，并泄露底层数据库中的数据。受影响版本的ANTEEO B2B WMS为v4.7.x至v4.7.34（不含）。 用法 1. git clone [email protected]:AndreaF17/PoC-CVE-2024-44349.git 2. cd PoC-CVE-2024-44349 3. python3 -m venv venv 4. source venv/bin/activate 5. pip3 install -r...

OSV-2026-1198 Stack-buffer-overflow in msLayoutTextSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551099259 Crash type: Stack-buffer-overflow READ 4 Crash state: msLayoutTextSymbol msWriteErrorImage msWMSException...

Astra Linux – Vulnerability in mapserver

MapServer is a system for developing web-based GIS applications. From version 6.4.0 to before version 8.6.3, msSLDParseUserStyle always called SLDApplyRuleValuespsRule, psLayer, 1 for any that contained . It assumed that msSLDParseRule had added a class. When the rule had no symbolizer a...

EUVD-2026-61725

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse...

EUVD-2026-61721

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse...

CVE-2026-50126

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

CVE-2026-50126

adaguc-server (versions prior to 7.2.2) has a memory-safety flaw in adagucserverEC/CConvertGeoJSON.cpp: it indexes coordinate array values and uses array length as a loop bound without validating JSON node type or coordinate length, affecting Polygon, LineString, MultiLineString and MultiPolygon ...

CVE-2026-50126

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

CVE-2026-50126 adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

PT-2026-77767

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Warehouse...

PT-2026-77207

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

CVE-2026-63700

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

CVE-2026-63700

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

EUVD-2026-58707

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

CVE-2026-66272

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-58683

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...