CVE-2025-24893

CVE-2025-24893 XWiki Platform의 RCE 취약점을 위한 Bash POC 스크립트 사용 예시: netcat 리스너 설정: root@kitploit: $ nc -nvlp 그런 다음 스크립트 실행: root@kitploit: $ chmod +x cve.sh $ ./cve.sh 영향을 받는 버전: 5.4부터 15.10.11까지 16.0.0부터 16.4.1까지 면책 조항 이 도구는 교육 목적으로만 제공됩니다. 오용에 대해 어떠한 책임도 지지 않습니다...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - 원격 코드 실행 비인증 공격자가 사전 인증이나 접근 권한 없이 Guest User 원격으로 임의의 Groovy 코드를 실행할 수 있는 RCERemote Code Execution 범주의 취약점입니다. 이 취약점을 악용하기 위한 Python 기반 PoCProof-Of-Concept입니다. 설치. 1. 저장소를 로컬 머신에 클론하세요. root@kitploit: git clone https://github.com/zs1n/CVE-2025-24893...

CVE-2025-24893-EXP

CVE-2025-24893-익스플로잇 영향을 받는 버전 xwiki-platform = 5.3-milestone-2, = 16.0.0-rc-1, 16.4.1 16.0.0-rc-1, 16.4.1 POC https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml CVE-2025-24893 - XWiki Platform 익스플로잇 사용법: python CVE-2025-24893.py -u -c 면책 조항 이 익스플로잇 ...

CVE-2024-31982

CVE-2024-31982 PoC 및 대량 스캐너 개요 CVE-2024-31982에 대한 POC: XWiki Platform 원격 코드 실행 14.10.20. 이 POC는 이 보안 권고를 기반으로 합니다. 사용 방법 단일 대상 스캔 단일 대상 엔드포인트를 스캔하려면: root@kitploit: python CVE-2024-31982.py -u target 대량 대상 스캔 대량 대상들을 스캔하려면: root@kitploit: python cve-2024-31982.py -f targets.txt 설치 최소 요구 사항 Python...

XWiki Platform - Cross-Site Scripting

XWiki Platform versions = 4.2-milestone-3 and = 16.5.0-rc-1 and = 17.0.0-rc-1 and = 4.2-milestone-3 and = 16.5.0-rc-1 and = 17.0.0-rc-1 and 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the...

XWiki - Information Disclosure

XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused by exposed context allowing static access to files in webapp/ folder, letting attackers access sensitive files, exploit requires use of XJetty package. id: CVE-2025-55749 info: name:...

XWiki < 4.10.20 - Remote code execution

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...

XWiki Platform - Path Traversal

XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges. id: CVE-2025-55748 info: name: XWiki Platform - Path Traversal author:...

XWiki Platform - Information Disclosure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. id: CVE-2025-55747 info: name: XWiki Platform - Information Disclosure author: Redmomn...

XWiki >= 6.2-milestone-1 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...

cve-2025-24893

CVE-2025-24893 XWiki RCE शोषण XWiki प्लेटफ़ॉर्म में CVE-2025-24893 , एक दूरस्थ कोड निष्पादन RCE भेद्यता का शोषण करने के लिए एक सरल Python3 स्क्रिप्ट, जो Groovy-आधारित async मैक्रो और एक कॉन्फ़िगरेबल रिवर्स शेल पेलोड का उपयोग करती है। ⚠️ चेतावनी: यह उपकरण केवल शैक्षिक और अधिकृत परीक्षण उद्देश्यों क...

CVE-2026-33137

CVE-2026-33137 XWiki Platform – Nicht authentifizierter XAR-Import via REST/wikis/wikiName Beschreibung Der REST-API-Endpunkt POST /wikis/wikiName in der XWiki-Plattform führt einen XAR-Import XWiki-Archiv durch, ohne dabei eine Authentifizierungs- oder Autorisierungsprüfung vorzunehmen. Ein nich...

XWiki Platform - Remote Code Execution

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document SkinsCode.XWikiSkinsSheet leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute...

XWiki Platform - SQL Injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...

CVE-2020-13654

CVE-2020-13654 - XWiki Platform Scoperto e segnalato da: Astaruf Analisi completa: https://nstsec.com/en/posts/xwiki-xss-cve-2020-13654/ Voce NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-13654 Vulnerabilità XWiki Platform prima della versione 12.8 non applica la codifica HTML ai campi controlla...

CVE-2025-24893

CVE-2025-24893 XWiki Platform é uma plataforma wiki genérica que fornece serviços de runtime para aplicações construídas sobre ela. Devido a uma vulnerabilidade no endpoint SolrSearch, um usuário não autenticado pode obter execução remota arbitrária de código. Esta vulnerabilidade afeta a...

CVE-2025-32429

CVE-2025-32429 PoC di SQL Injection in XWiki Autore: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑32429 Vulnerabilità: Blind SQL Injection nell'API REST LiveData di XWiki File interessato: getdeleteddocuments.vm parametro sort Descrizione : Una vulnerabilità di SQL Injection cieca esiste...

xwiki__xwiki-commons_CVE-2023-31126_14-10-3

XWiki Commons XWiki Commons sono librerie tecniche comuni a diversi altri progetti XWiki di primo livello. Queste librerie possono essere utilizzate da progetti esterni all'ecosistema XWiki, sono generiche e non legate al dominio wiki. XWiki Platform, XWiki Commons e XWiki Rendering fanno parte...

xwiki__xwiki-commons_CVE-2023-29201_14-5

XWiki Commons XWiki Commons sono librerie tecniche comuni a diversi altri progetti top-level di XWiki. Queste librerie possono essere usate da progetti al di fuori dell'ecosistema XWiki, sono generiche e non correlate al dominio wiki. XWiki Platform, XWiki Commons e XWiki Rendering fanno parte...

xwiki__xwiki-commons_CVE-2022-24897_12-6-6

XWiki Commons XWiki Commons sono librerie tecniche comuni a diversi altri progetti XWiki di alto livello. Queste librerie possono essere utilizzate da progetti al di fuori dell'ecosistema XWiki, sono generiche e non correlate al dominio wiki. XWiki Platform, XWiki Commons e XWiki Rendering fanno...