69 matches found
geoserver-
GeoServer CVE-2024-36401 Exploitation Tool GeoServer CVE-2024-36401 Environment: JDK8 Disclaimer: For authorized testing only. The author bears no responsibility for any consequences caused by user misuse. Please comply with laws and regulations! 1. Default payload: POST /geoserver/wfs HTTP/1.1...
GeoServer-CVE-2024-36401
GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Vulnerabilità di esecuzione di codice remoto RCE nella valutazione delle espressioni dei nomi delle proprietà GetPropertyValue root@kitploit: POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0...
CVE-2026-76904
GeoServer WFS Inventário e Verificação Autorizada Este repositório contém dois scripts Python para investigação de endpoints WFS do GeoServer. Visão Geral wfsinventory.py Finalidade: Inventariar camadas, campos XSD e valores WFS, além de verificar opcionalmente candidatos por meio de uma...
geoexplorer
Cliente GeoExplorer Este é o componente cliente do projeto GeoExplorer, projetado para enviar solicitações para instâncias do GeoServer e testar possíveis vulnerabilidades. Requisitos Python 3.x Pacotes Python necessários instale usando pip install -r requirements.txt: requests argparse urllib3 U...
GeoServer WFS - XXE Processing Vulnerability
GeoServer Web Feature Service WFS is vulnerable to an XML External Entity XXE processing attack due to improper handling of XML input. This vulnerability allows attackers to perform Out-of-Band OOB data exfiltration and Server-Side Request Forgery SSRF by exploiting the GeoTools library. id:...
CVE-2023-25157-GeoServer-SQLi-Lab
GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — مختبر الثغرات وتقرير PoC بيئة تدريب عملي Vulnerable Lab وتقرير تحليل واستغلال مفصل لثغرة حقن SQL Error-based في GeoServer CVE-2023-25157 ومكتبة GeoTools CVE-2023-25158. تقرير التحليل والاستغلال المفصل يُرجى الاطلاع على الوثيقة...
CVE-2024-36401
CVE-2024-36401 Strumento di sfruttamento della vulnerabilità GeoServer Introduzione alla vulnerabilità CVE-2024-36401 è una vulnerabilità di esecuzione remota di comandi in GeoServer. Un attaccante può eseguire comandi arbitrari senza autorizzazione costruendo specifiche richieste WFS Web Feature...
geoserver-CVE-2023-25157
geoserver CVE-2023-25157 الفريق الأبيض White Hat الدفعة الثالثة الصف 30 كيم جونغ-وو رابط جيثب - https://github.com/custiya/geoserver-CVE-2023-25157 ملخص الثغرة CVE-2023-25157 هي ثغرة SQLi تصيب GeoServer، وهو تطبيق ويب مفتوح المصدر لخدمات بيانات الخرائط تحدث في بعض إصدارات GeoServer حتى 2.22.0 وما...
CVE-2023-25157-checker
CVE-2023-25157-checker Uno script scritto in Golang. POC per CVE-2023-25157 Passaggi per l'uso 1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git 2. cd CVE-2023-25157-checker 3. go run CVE-2023-25157.go Sostituisci con l'URL del server di destinazione. Google Dork...
CVE-2023-29804
WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the syssmbpwdmod function...
EUVD-2017-14626
Malware in sbrugna...
EUVD-2025-17815
Malicious code in bioql PyPI...
EUVD-2023-33343
Malicious code in bioql PyPI...
GHSA-2P76-GC46-5FVC GeoNetwork affected by XML External Entity (XXE) processing vulnerability in WFS indexing REST API endpoint
Impact GeoNetwork WFS Index functionality is affected by GeoTools XML External Entity XXE vulnerability during schema validation. This vulnerability is particularly severe as the REST API endpoint was not secured, potentially allowing unauthenticated attackers to read sensitive files Patches...
GHSA-JJ54-8F66-C5PC [XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service
Summary GeoServer Web Feature Service WFS web service was found to be vulnerable to GeoTools CVE-2025-30220 XML External Entity XXE processing attack. It is possible to trigger the parsing of external DTDs and entities, bypassing standard entity resolvers. This allows for Out-of-Band OOB data...
CVE-2025-30220
GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity XXE exploit. This impacts whoever exposes XML processing with gt-xsd-core involved in...
PT-2025-26488 · Maven · Org.Geonetwork-Opensource:Gn-Web-App +1
Impact GeoNetwork WFS Index functionality is affected by GeoTools XML External Entity XXE vulnerability during schema validation. This vulnerability is particularly severe as the REST API endpoint was not secured, potentially allowing unauthenticated attackers to read sensitive files Patches...
PT-2025-26262 · Maven · Org.Geotools:Gt-Wfs-Ng +1
Summary GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity XXE exploit. Impact This impacts whoever exposes XML processing with gt-xsd-core involved in parsing, when the documents carry a reference to an external XML schema. Th...
