Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.3 CVE-2025-8913

WellChoose｜Organization Portal System – Local File Inclusion_CVE-2025-8913

Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute a...

WellChoose Organization Portal System CVE
CRITICAL 10 THN:7B84183CA8F...

Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws_THN:7B84183CA8FDD4C95B491A65BC16DE76

![August 2025 Patch Tuesday](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=) M...

N/A N/A THN
CRITICAL 9.8 3FC9E9A2-42CE-

Exploit for Code Injection in Xwiki_3FC9E9A2-42CE-552A-A046-E205E2471000

# CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki ## 0 Table of Contents 1. [Summary](#1-summary) 2. [Vulnerability Details](#2...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 CC794B3A-AEAA-

Exploit for Deserialization of Untrusted Data in Microsoft_CC794B3A-AEAA-5702-835E-CDE940323175

# CVE-2025-53770 – Microsoft SharePoint Server 2019 Unauthenticated RCE via Deserialization ![CVE-2025-53770](https://img.shields.io/badge/CVE-202...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 BA812463-BBF5-

Exploit for Code Injection in Xwiki_BA812463-BBF5-56F4-857D-CA61CFE29B88

# CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform ### Example usage: Setup a netcat listener: ``` $ nc -nvlp ``` Then run...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 E5B5FB6C-FB47-

Exploit for Code Injection in Xwiki_E5B5FB6C-FB47-5B80-9C21-F45B725632D3

# CVE-2025-24893 Install bun: ```bash curl -fsSL https://bun.com/install | bash ``` To install dependencies: ```bash bun install ``` To run: ...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 B938A437-C237-

Exploit for Code Injection in Xwiki_B938A437-C237-5C4D-B15E-379C2F2B054F

## 📜 **Description** A **critical RCE vulnerability** exists in **XWiki** that allows **unauthenticated attackers** to execute arbitrary system c...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 F2E4B773-91F0-

Exploit for Code Injection in Vmware Spring_Cloud_Gateway_F2E4B773-91F0-59FF-A88F-8896ED7892F1

# CVE-2022-22947 Spring Cloud Gateway 漏洞验证应用 这是一个专门用于演示和验证 CVE-2022-22947 漏洞的 Spring Cloud Gateway 应用。该应用程序使用了易...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 600D847E-92F9-

Exploit for Code Injection in Xwiki_600D847E-92F9-5F36-9FDD-7E5D87C35788

# PoC for CVE-2025-24893 — XWiki Remote Code Execution (Safe PoC) **PoC for CVE-2025-24893:** XWiki' Remote Code Execution exploit for versions pr...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.3 062D742D-74A5-

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo_062D742D-74A5-5993-8A6E-3C6E2BFDBF34

## CVE-2025-32463 Exploit Tool This repository contains a Go-based exploit tool for **CVE-2025-32463**, a critical privilege escalation vulnerabili...

N/A N/A GITHUBEXPLOIT