CVE-2025-66516-Writeup-POC

CVE-2025-66516: Critical XXE Vulnerability in Apache Tika Executive Summary CVE-2025-66516 is a critical XML External Entity XXE injection vulnerability in Apache Tika with a CVSS score of 10.0 maximum severity. The vulnerability allows remote attackers to read arbitrary files, perform Server-Sid...

java-cve-2021-29425-tika-xxe

java-cve-2021-29425-tika-xxe...

CVE-2025-66516-POC

⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educational/Authorized Testing Only | License | Security Policy About This POC...

Apache Tika - XXE Injection

Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE via malicious XFA in PDFs, allowing file read and SSRF attacks. id: CVE-2025-54988 info: name: Apache Tika - XXE Injection author: tx1ee severity: critical description: | Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE vi...

CVE-2018-11761

Summary In a recent research on Apache Tika, I found a DOS Denial of Service vulnerability existed on its XML parser. It is caused that the parser improperly parses XML document. Affected Version Tested on ElasticSearch 6.3.1 using Tika 1.18 and 6.2.3 using Tika 1.17 Analysis As we know, the core...

Tika-CVE-2025-66516-Lab

CVE-2025-66516 Minimal Verification Environment This project is used to verify CVE-2025-66516 XML External Entity Injection Vulnerability in Apache Tika. Vulnerability Description Apache Tika 3.2.1 and earlier versions, when parsing PDF files containing XFA forms, did not properly disable externa...

cve-2018-1335

Ankara Yildirim Beyazit University Computer Engineering Department CENG 325 - Principles of Information Security And Privacy CENG201 OOP Project Group Members @canumay @aslihann @ezgigucuyener @mburakdonmez References NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 - Command Injection...

cve-2025-54988-VulnTikaProject

Apache Tika Vulnerability Testing Project This is a Spring Boot application that uses Apache Tika 3.2.1 for document processing and text extraction. Prerequisites Have Docker Usage ./start-app.sh or docker compose up -d CVE execution Upload your malicious PDF...

Blackash-CVE-2025-66516

🚨 CVE-2025-66516 — Apache Tika 严重漏洞 CVSS: 10.0 | 漏洞类型: XXE 注入 | 风险等级: 最高 🎯 执行摘要 CVE-2025-66516 是 Apache Tika 核心处理引擎中的一个严重 XML 外部实体 XXE 漏洞。 单个包含 XFA 内容的恶意 PDF 可触发： 🔓 敏感文件泄露 🌐 服务器端请求伪造 SSRF 💻 潜在的远程代码执行 RCE 该漏洞影响全球数百万文档处理管道 。 🧨 根本原因是什么？ 🚩 对嵌入在 PDF 的 XFA 表单 中的外部 XML 实体 进行了不安全处理。 当 Apache Tika 解析这些文档时...

DeepPass

DeepPass Dockerized application that analyzes documents for password candidates. The blogpost "DeepPass — Finding Passwords With Deep Learning" gives more detail on the approach and development of the model. To run: docker-compose up This will expose http://localhost:5000 where documents can be...

Apache Tika - XML External Entity Injection

Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1, and tika-parsers 1.13-1.28.5 contain an XML External Entity injection caused by processing crafted XFA files inside PDFs, letting attackers perform XXE attacks remotely, exploit requires crafted PDF input. id: CVE-2025-66516 info: nam...

CVE-2018-1335

CVE-2018-1335 RCE vulnerability remote code execution on servers apache Tika-server with versions lower than 1.18 commands: sudo bash install.sh python2 exploit.py...

Apache Tika < 1.1.8 - Header Command Injection

Apache Tika versions 1.7 to 1.17 allow clients to send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. i...

Adobe Experience Manager 6.5.0 < 6.5.3 / 2026.7.0 < 2026.8.0 Multiple Vulnerabilities (APSB26-98)

The version of Adobe Experience Manager installed on the remote host is prior to 2026.8.0, 6.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-98 advisory. - Critical XXE in Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1 and tika-parsers...

CVE-2026-50645 vulnerabilities

Vulnerabilities for packages: apache-tika...

GHSA-GHVC-7HP8-2G2V vulnerabilities

Vulnerabilities for packages: apache-tika...

CVE-2026-50645 vulnerabilities

Vulnerabilities for packages: apache-tika, wso2is, apache-tika-fips...

GHSA-GHVC-7HP8-2G2V vulnerabilities

Vulnerabilities for packages: apache-tika, wso2is, apache-tika-fips...

GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, opensearch, copybara-fips, conductor-fips, conductor, jbang, gradle, apache-hop, apache-hop-fips, nextflow, copybara, apache-tika, opensearch-fips, elasticsearch, wazuh-indexer, metabase, elasticsearch-fips, apache-tika-fips, scala...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, opensearch, copybara-fips, conductor-fips, conductor, jbang, gradle, apache-hop, apache-hop-fips, nextflow, copybara, apache-tika, opensearch-fips, elasticsearch, wazuh-indexer, metabase, elasticsearch-fips, apache-tika-fips, scala...