29 matches found
Exploit for Code Injection in Xwiki
CVE-2025-24893 Exploit de Execução Remota de Código RCE no X...
Exploit for Code Injection in Xwiki
CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview...
Exploit for Code Injection in Xwiki
XWiki Platform Unauthenticated RCE Exploit Overview This s...
Exploit for Code Injection in Xwiki
Description: XWiki Platform is a generic wiki platform offering...
Exploit for Code Injection in Xwiki
Description: XWiki Platform is a generic wiki platform offering...
📄 XWiki Platform 15.10.10 Remote Command Execution
XWiki Platform version 15.10.10 suffers from a critical unauthenticated remote command execution vulnerability through the SolrSearch endpoint. The issue is patched in versions 15.10.11, 16.4.1, and 16.5.0RC1...
Exploit for Code Injection in Xwiki
CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit for Reve...
About Remote Code Execution – XWiki Platform (CVE-2025-24893) vulnerability
About Remote Code Execution - XWiki Platform CVE-2025-24893 vulnerability. XWiki is a free and open-source wiki platform written in Java, with a strong focus on extensibility. It supports WYSIWYG visual editing, importing and exporting documents in OpenDocument format, adding annotations and tags...
XWiki Platform Eval Injection Vulnerability
XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch...
Exploit for Code Injection in Xwiki
CVE-2025-24893 - XWiki Remote Code Execution via SolrSearch SS...
Exploit for Code Injection in Xwiki
XWiki SSTI Exploit A Python exploit for XWiki Server-Side Tem...
📄 XWiki Platform Remote Code Execution
This Metasploit module exploits a template injection vulnerability in the the XWiki Platform. XWiki includes a macro called SolrSearch defined in Main.SolrSearchMacros that enables full-text search through the embedded Solr engine. The vulnerability stems from the way this macro evaluates search...
Exploit for Code Injection in Xwiki
solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CV...
Exploit for Code Injection in Xwiki
CVE-2025-24893 - XWiki Unauthenticated Remote Code Execution...
Exploit for Code Injection in Xwiki
CVE-2025-24893 XWiki Unauthenticated Remote code execution POC...
Exploit for Code Injection in Xwiki
CVE-2025-24893 – Unauthenticated Remote Code Execution in XWik...
Exploit for Code Injection in Xwiki
XWiki CVE-2025-24893 Proof of Concept Authors: Net.Doge...
XWiki Platform SolrSearch Macro Remote Code Execution
XWiki Platform versions from 5.3-milestone-2 before 15.10.11 and from 16.0.0-rc-1 before 16.4.1 suffer from a Server-Side Template Injection SSTI due to the lack of sanitization of the SolrSearch Macro requests. By leveraging this vulnerability, a remote and unauthenticated attacker can achieve...
XWiki Platform 15.10.10 - Remote Code Execution
Exploit Title: XWiki Platform - Remote Code Execution Exploit Author: Al Baradi Joy Exploit Date: April 6, 2025 CVE ID: CVE-2025-24893 Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: Affected versions up to and including XWiki 15.10.10 Teste...
VulnCheck KEV: CVE-2025-24893
XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch...