162 matches found
CVE-2025-53694-to-CVE-2025-53691
Sitecore CVE Chain Exploits This repository contains proof-of-concept exploits for a critical vulnerability chain in Sitecore Experience Platform XP versions up to 10.4.1. Vulnerabilities CVE-2025-53694: Information Disclosure CVE-2025-53693: Cache Poisoning CVE-2025-53691: Remote Code Execution...
SiteCore-RCE-Detection
SiteCore-RCE-Detection For detection of sitecore RCE - CVE-2021-42237 Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237 Relies on sitecore version detection and response when a request is made to vulnerale Report.ashx via Get and Post. The script takes a file containing list of urls in...
📄 Sitecore Experience Manager / Experience Platform 10.1 Shell Upload / Hardcoded Credentials
Proof of concept exploit for a remote code execution vulnerability chain affecting Sitecore Experience Platform versions 10.x combining hardcoded credentials with file upload vulnerabilities for complete system compromise...
Sitecore Experience Manager Deserialization RCE
The vulnerability of the Sitecore Experience Manager XM, Experience Platform XP, and the Experience Commerce XC platform for personalized purchasing processes is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code an...
Sitecore Experience Manager XP Privilege Escalation
The vulnerability of Sitecore Experience Manager XM and Experience Platform XP management systems is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow an attacker to gain access to a user account with administrative privileges...
Sitecore Experience Manager Path Traversal RCE
The vulnerability of the Sitecore Experience Manager XM, Experience Platform XP, and the Experience Commerce XC platform for personalized purchasing processes is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to gain access to...
CVE-2019-11080
Sitecore Experience Platform XP prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS 293863. An authenticated user with necessary permissions is able to remotely execute OS commands by sending a crafted serialized object...
Sitecore Experience Platform Code Execution
The vulnerability of the Sitecore Experience Platform XP and Sitecore Experience Manager XM content management systems is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Exploit for Code Injection in Sitecore Experience_Commerce
CVE-...
Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce
PoC exploit for CVE-2025-53690, a vulnerability in a .NET framew...
EUVD-2015-9402
Malware in sbrugna...
EUVD-2016-9680
Malware in sbrugna...
EUVD-2025-22720
Malicious code in bioql PyPI...
EUVD-2023-37808
Malicious code in bioql PyPI...
EUVD-2023-30856
Malicious code in bioql PyPI...
EUVD-2025-18524
Malicious code in bioql PyPI...
EUVD-2023-37809
Malicious code in bioql PyPI...
EUVD-2025-26499
Malicious code in bioql PyPI...