CVE-2025-53691

CVE-2025-53691：安全でないデシリアライゼーションによるリモートコード実行（RCE） AjaxScriptManager 内の同じリフレクションメカニズムを使用して、ProcessSerializedData メソッドを呼び出すことができます。このメソッドは、安全でない BinaryFormatter を使用して提供されたペイロードをデシリアライズし、RCE につながります。攻撃者は、悪意のあるシリアライズ済みオブジェクトを作成して、サーバー上で任意のコマンドを実行できます。 リモートコード実行： 攻撃者は CVE-2025-53691...

CVE-2025-53693

CVE-2025-53693: HTMLキャッシュポイズニング /-/xaml/ にあるXAMLハンドラーは、認証なしでアクセス可能ないくつかのコントロールを公開しています。これらのコントロール内の AjaxScriptManager は、リフレクションを介したメソッドの実行を許可します。AddToCache メソッドを悪用して、任意のHTMLコンテンツをSitecoreキャッシュに注入し、アプリケーションの他の部分でレンダリングすることができます。 キャッシュポイズニング: 攻撃者はCVE-2025-53693を使用して、悪意のあるペイロードでキャッシュを汚染します。 緩和策...

CVE-2021-42237-SiteCore-XP

CVE-2021-42237-SiteCore-XP 同様に、検査が必要なURLをtarget.txtに入れてください DNSLOGプラットフォームは自分で登録して変更してください...

CVE-2025-53690

CVE-2025-53690 Sitecore Experience Manager XM および Sitecore Experience Platform XP における信頼されていないデータのデシリアライゼーションの脆弱性により、コードインジェクションが可能になります。この問題は Experience Manager XM: バージョン9.0以下、Experience Platform XP: バージョン9.0以下に影響します。 この検出方法はどのように機能しますか？ このNucleiテンプレートは sitecore.version.xml...

CVE-2025-53690-Analysis

CVE-2025-53690: Sitecore ViewState Deserialization 脆弱性分析 概要 CVE-2025-53690 は、Sitecore 製品群で発見された ViewState 逆シリアル化脆弱性であり、公開された ASP.NET machine key を悪用してリモートコード実行が可能な致命的なセキュリティ脆弱性です。 基本情報 CVE ID : CVE-2025-53690 CVSS スコア : 9.0 Critical 脆弱性タイプ : 信頼できないデータの逆シリアル化 CWE-502 発見日 : 2025年9月 公開日 : 2025年9月3日...

Metasploit Weekly Wrap-Up 09/19/2025

Consistently Persistent The Metasploit Framework has around 26 different modules which can be used to establish persistence on a target. Persistence modules help operators ensure they can maintain a consistent foothold within an environment once a target has been compromised and are quite helpful...

CVE-2025-53691

CVE-2025-53691 is a Sitecore vulnerability: insecure deserialization in Sitecore Experience Manager (XM) and Experience Platform (XP) can lead to Remote Code Execution (RCE). Affected: XM 9.0–9.3 and 10.0–10.4; XP 9.0–9.3 and 10.0–10.4. Root cause: untrusted data deserialization using insecure pa...

CVE-2015-10142 Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path

Sitecore Experience Platform XP prior to 8.0 Initial Release rev. 141212 and Content Management System CMS prior to 7.2 Update-3 rev. 141226 and prior to 7.5 Update-1 rev. 150130 contain a vulnerability that may allow an attacker to download files under the web root of the site when the name of t...

CVE-2015-10142 Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path

Sitecore Experience Platform XP prior to 8.0 Initial Release rev. 141212 and Content Management System CMS prior to 7.2 Update-3 rev. 141226 and prior to 7.5 Update-1 rev. 150130 contain a vulnerability that may allow an attacker to download files under the web root of the site when the name of t...

CVE-2015-10142

CVE-2015-10142 affects Sitecore Experience Platform (XP) prior to 8.0 Initial Release and Sitecore CMS prior to 7.2 Update-3 and prior to 7.5 Update-1. The flaw allows an attacker to download files under the web root when the file name is known via a specially crafted URL; allowed file types excl...

Sitecore XM/XP/XC Hardcoded Credentials

Sitecore XM, XP and XC version 9.x = 9.3 or version 10.x 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP. No source data...

CVE-2025-34510 Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip

Sitecore Experience Manager XM, Experience Platform XP, and Experience Commerce XC versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing...

CVE-2025-34510 Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip

Sitecore Experience Manager XM, Experience Platform XP, and Experience Commerce XC versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing...

CVE-2025-34509 Sitecore XM and XP Hardcoded Credentials

Sitecore Experience Manager XM and Experience Platform XP versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access...

Sitecore XP CVE-2025-34511 Post-Authentication File Upload

This module exploits CVE-2025-34511, a file upload vulnerability in PowerShell extensions. The module exploits also CVE-2025-34509 - hardcoded credentials of ServicesAPI account - to gain foothold. Module Options msf use exploit/windows/http/sitecore/xpcve202534511 msf undefinedxpcve202534511 sho...

CVE-2019-9874

Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF aka anti CSRF module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter CSRFTOKEN...

Sitecore XM/XP Remote Code Execution

Sitecore XM and XP versions before 10.4 KB1002844 suffer from a deserialization vulnerability through a specially forged request enabling an unauthenticated attacker to execute arbitrary commands. No source data...

CVE-2025-27218

Sitecore Experience Manager XM and Experience Platform XP 10.4 before KB1002844 allow remote code execution through insecure deserialization...

CVE-2023-33653

Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /Applications/Content%20Manager/Execute.aspx?cmd=convert&mode=HTML...

CVE-2023-26262

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management CM server...