CVE-2025-24893

CVE-2025-24893 XWiki RCE Vulnerability Analysis Environment Setup 1. Running XWiki 15.10.10 Environment root@kitploit: docker-compose up -d 2. Accessing XWiki URL: http://localhost:8080 Proceed with testing after completing the initial setup Create an admin account after accessing the initial...

xwiki-cve-2025-24893-exploit

XWiki CVE-2025-24893 Exploit Unauthenticated Remote Code Execution exploit for XWiki versions vulnerable to CVE-2025-24893. Vulnerability Overview XWiki versions prior to 15.10.9 are vulnerable to unauthenticated RCE through Groovy script injection in the SolrSearch RSS feed handler. The...

codeql-workshop-cve-2021-21380

CodeQL workshop for Java: Finding a SQL injection In this workshop we will use syntactical and semantic reasoning to find a SQL injection in the XWiki platform's rating component documented by CVE-2021-21380 Contents CodeQL workshop for Java: Finding a SQL injection Contents Prerequisites and set...

CVE-2025-24893

CVE-2025-24893 – Ejecución Remota de Código RCE en XWiki Descripción General CVE-2025-24893 es una vulnerabilidad crítica de Ejecución Remota de Código RCE no autenticada en XWiki , una plataforma wiki empresarial de código abierto ampliamente utilizada. El fallo existe en la macro SolrSearch, la...

xwiki_solrsearch-rce-exploit

solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit Affected XWiki Versions Versions 15.10.11 Versions 16.4.1 Versions 16.5.0RC1 Vulnerability Description Affected XWiki versions contain a Remote Code Execution vulnerability caused by unsafe Groovy expression handling in the SolrSearch macro...

CVE-2025-24893-

CVE-2025-24893- CVE-2025-24893 | XWiki 플랫폼의 원격 코드 실행 취약점 개념 증명...

xwiki-15.10.8-reverse-shell-cve-2025-24893

Exploit de Reverse Shell CVE-2025-24893 para XWiki Descargo de responsabilidad: Este script está destinado solo con fines educativos y pruebas de seguridad autorizadas. No lo utilice en sistemas que no posea o para los que no tenga permiso explícito para realizar pruebas. El mal uso puede ser...

XWiki-Platform-RCE-CVE-2025-24893

Exploit de RCE no autenticado en XWiki Platform Descripción general Este script es una implementación renovada en Bash de un exploit que apunta a las versiones de XWiki Platform afectadas por CVE-2025-24893. Aprovecha una vulnerabilidad crítica de ejecución remota de código no autenticado que...

xwiki-cve-2025-24893-poc

PoC de Exploit RCE en XWiki CVE-2025-24893 Descripción general Este repositorio contiene una Prueba de Concepto PoC del exploit para la vulnerabilidad de Ejecución Remota de Código RCE en XWiki identificada como CVE-2025-24893. La vulnerabilidad permite a un atacante ejecutar código arbitrario en...

CVE-2025-24893-XWiki-RCE

📜 Description A critical RCE vulnerability exists in XWiki that allows unauthenticated attackers to execute arbitrary system commands via vulnerable API endpoints. Exploitation can result in: Full server takeover Data theft or destruction Pivoting into internal networks 💥 Impact Complete compromi...

CVE-2025-24893

CVE-2025-24893 root@kitploit: Exploit Title: XWiki 15.10.10 - Unauthenticated Remote Code Execution Date: 09/08/2025 Exploit Author: D3Ext Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: 15.10.10 Tested on: Kali Linux 2025 CVE: CVE-2025-2489...

CVE-2024-31982

CVE-2024-31982 Vulnerability for XWiki...

XWiki Platform - Remote Code Execution

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document SkinsCode.XWikiSkinsSheet leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute...

XWiki < 4.10.15 - Sensitive Information Disclosure

XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are...

XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...

CVE-2025-24893

XWiki CVE-2025-24893 Proof of Concept Authors : Net.Doge & Infinit3i This Python script exploits CVE-2025-24893 , a remote code execution RCE vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - Exploit de ejecución remota de código en XWiki PoC para CVE-2025-24893 – Ejecución remota de código mediante macro de XWiki Inspirado en el PoC original de Artemir Descripción Este es un exploit de prueba de concepto PoC para CVE-2025-24893 , una vulnerabilidad de ejecución remot...

CVE-2025-24893

CVE-2025-24893 - Ejecución Remota de Código No Autenticada en XWiki Exploit PoC para la vulnerabilidad de Ejecución Remota de Código No Autenticada en XWiki CVE-2025-24893. Este PoC permite ejecutar comandos arbitrarios a través de código Groovy en la macro SolrSearch. Detalles root@kitploit:...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Ejecución Remota de Código Una vulnerabilida de categoría RCE Remote Code Execution, encontrada cuando atacantes no autenticados pueden ejecutar codigo Groovy arbitrario remotamente sin la autenticación ni el accesso previo Guest User. A continuación...