CVE-2025-24893

CVE-2025-24893 漏洞利用 CVE-2025-24893 是一个影响 XWiki 平台 的 关键未认证远程代码执行 RCE 漏洞。 该漏洞允许任何访客用户通过向 SolrSearch 端点发送特制的 RSS 请求，在无需认证的情况下注入并执行任意 Groovy 代码 。 这直接影响受影响系统的 机密性、完整性和可用性 。 摘要 受影响版本: XWiki ≥ 5.3-milestone-2 至 ⚠️ 免责声明: 本代码仅供教育和研究目的使用。未经明确许可在系统上使用可能构成违法。 作者不对任何滥用或恶意行为负责。 概念验证 POC root@kitploit: GET...

CVE-2025-24893

CVE-2025-24893 XWiki上でのリモートコード実行（RCE）エクスプロイト CVE-2025-24893 に対するPython3エクスプロイト。XWiki プラットフォームに影響する、認証不要のリモートコード実行（RCE）の重大な脆弱性です。...

Ofbiz-RCE

📌 Apache OFBiz RCE 漏洞利用工具 CVE-2024-38856 该 Python 脚本可利用 Apache OFBiz（版本 18.12.15）中的远程代码执行（RCE）漏洞，通过未授权访问 /webtools/control/forgotPassword/ProgramExport 端点实现攻击。 🛠️ 描述 CVE : CVE-2024-38856 类型 : 不正确的授权 → 远程代码执行 组件 : Apache OFBiz 受影响版本 : 早于 18.12.15 漏洞利用 : 通过 POST 发送转换为 Unicode（\uXXXX）的 Groovy 代码注入。 🚀...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - 远程代码执行 一个 RCE（远程代码执行）类别的漏洞，当未经身份验证的攻击者可以在无需身份验证或先前访问权限（访客用户）的情况下远程执行任意 Groovy 代码时被发现。以下是针对此漏洞的 Python PoC（概念验证）。 安装。 1. 克隆仓库到您的机器。 root@kitploit: git clone https://github.com/zs1n/CVE-2025-24893 2. 执行漏洞利用脚本。 root@kitploit: python3 CVE-2025-24893.py...

XWiki-Platform-RCE-CVE-2025-24893

XWikiプラットフォーム 未認証RCEエクスプロイト 概要 このスクリプトは、CVE-2025-24893の影響を受けるXWikiプラットフォームのバージョンを標的としたエクスプロイトのリファービッシュされたBash実装です。これは、SolrSearchマクロのテンプレートインジェクションの欠陥を介して、攻撃者が任意のGroovyコードを実行できるようにする重大な未認証のリモートコード実行脆弱性を利用します。 元のPythonによるエクスプロイト実装はさまざまなセキュリティ研究者によって作成され、ここでは簡素化された実行と使いやすさの向上を図ってBashユーザー向けに適合されています。...

CVE-2026-52833

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a build.gradle file during function builds using Go's text/template package. The template renders runtimeAttributes.repositories values with the . action, which...

PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)

This module exploits an authentication bypass in PaperCut NG and MF. A crafted Apache Tapestry complex-direct request invokes privileged ConfigEditor components through the public Home page. On version 26, the module reconfigures external user lookup to use an H2 JDBC URL whose initialization SQL...

CVE-2026-78166

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

EUVD-2026-64686

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CVE-2026-78166

A code injection vulnerability was identified in provectus kafka-ui (up to 0.7.2), affecting the Groovy Code Handler component. Specifically, the executeSmartFilterTest function in MessagesController.java can be exploited remotely to inject and execute arbitrary code. The exploit has been release...

CVE-2026-78166 provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CVE-2026-78166 provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CVE-2026-78166: Improper Control of Generation of Code

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

PT-2026-79803

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE

Summary Nuclio's Java runtime generates a build.gradle file during function builds using Go's text/template package. The template renders runtimeAttributes.repositories values with the . action, which performs no escaping. An attacker can embed a closing brace to break out of the repositories blo...

CVE-2026-42049

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

EUVD-2026-44534

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

CVE-2026-42049 jadx: RCE Via Groovy Code Injection in Gradle Export

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

CVE-2026-42049 jadx: RCE Via Groovy Code Injection in Gradle Export

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...

CVE-2026-42049 jadx: RCE Via Groovy Code Injection in Gradle Export

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...