3563 matches found
VulnCheck KEV: CVE-2025-55748
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, configuration files are accessible through jsx and sx endpoints. It's possible to access and read configuration files by using URLs such as...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-24893link is external XWiki Platform Eval Injection Vulnerability CVE-2025-41244link is external Broadcom VMware Aria Operations and VMware Tools Privilege...
XWiki Platform Eval Injection Vulnerability
XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch...
Hackers Hijack Corporate XWiki Servers for Crypto Mining
Hackers exploit critical XWiki flaw CVE-2025-24893 to hijack corporate servers for cryptomining, with active attacks confirmed by VulnCheck researchers...
Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack
Threat actors are actively exploiting multiple security flaws impacting Dassault Systèmes DELMIA Apriso and XWiki, according to alerts issued by the U.S. Cybersecurity and Infrastructure Security Agency CISA and VulnCheck. The vulnerabilities are listed below - CVE-2025-6204 CVSS score: 8.0 - A...
The vulnerability of the LESS script interface of the compiler used in the XWiki Platform, a platform for creating collaborative web applications, allows attackers to slow down the platform’s operation time.
The vulnerability of the LESS script API interface of the XWiki Platform, a platform for creating collaborative web applications, is related to improper authentication. Exploiting this vulnerability can allow an attacker to slow down the platform’s operation remotely...
The vulnerability of the Solr service on the XWiki Platform, a platform for creating collaborative web applications, allows a hacker to delete any files they desire.
The vulnerability of the Solr service, a platform for creating collaborative web applications, affects the XWiki Platform. This vulnerability can allow a malicious actor to delete arbitrary files remotely...
The vulnerability of the org.xwiki.platform:xwiki-platform-skin-skinx component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows an attacker to compromise the confidentiality of protected information.
The vulnerability of the org.xwiki.platform:xwiki-platform-skin-skinx component of the XWiki Platform framework is related to errors in processing the relative path to the directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of protected...
Vulnerability of the HTTP Meta Info fields, Footer Copyright, and Footer Version fields in the administration interface for creating collaborative web applications – XWiki Platform. This allows attackers to perform cross-site scripting attacks (XSS).
The vulnerabilities of the HTTP Meta Info, Footer Copyright, and Footer Version fields in the administration interface for the XWiki Platform’s collaborative web applications are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities could allow...
CVE-2025-49594
XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows...
CVE-2025-52472
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is...
EUVD-2021-0708
Malware in sbrugna...
EUVD-2021-1471
Malware in sbrugna...
EUVD-2021-0624
Malware in sbrugna...
EUVD-2010-4607
Malware in sbrugna...
EUVD-2007-4879
Malware in sbrugna...
EUVD-2010-4606
Malware in sbrugna...
EUVD-2005-4853
Malware in sbrugna...