Groovy — PoC Archivehttps://poc.intelseclab.com/tags/groovy/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000XWiki SolrSearch Macro Unauthenticated Groovy RCE (CVE-2025-24893)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-24893-xwiki-solrsearch-groovy-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-24893-xwiki-solrsearch-groovy-rce/Critical severity (CVSS 9.8) — web · CVE-2025-24893. Status: Weaponized. Affects: XWiki (SolrSearch macro, Main.SolrSearch). Tags: xwiki, groovy, rce, unauthenticated, cwe-94, code-injection, reverse-shell, python, wiki.webCriticalxwikigroovyrceunauthenticatedcwe-94code-injectionreverse-shellpythonwikiOracle Identity Manager `;.wadl` Authentication Bypass + Groovy Script RCE (CVE-2025-61757)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-61757-oracle-identity-manager-auth-bypass-groovy-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-61757-oracle-identity-manager-auth-bypass-groovy-rce/Critical severity (CVSS 9.8) — web · CVE-2025-61757. Status: PoC. Affects: Oracle Identity Manager (OIM) — applicationmanagement REST API. Tags: oracle, identity-manager, oim, authentication-bypass, rce, groovy, wadl, security-filter, cwe-287, cwe-94.webCriticaloracleidentity-manageroimauthentication-bypassrcegroovywadlsecurity-filtercwe-287cwe-94XWiki Unauthenticated XAR Import Leading to RCE — CVE-2026-33137https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33137-xwiki-xar-import-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33137-xwiki-xar-import-rce/Critical severity (CVSS 9.3) — web · CVE-2026-33137. Status: Weaponized. Affects: XWiki Platform. Tags: xwiki, rce, missing-authorization, xar-import, groovy, velocity, unauthenticated, cwe-862.webCriticalxwikircemissing-authorizationxar-importgroovyvelocityunauthenticatedcwe-862Apache NiFi 2.8.0 — EXECUTE_CODE Permission Bypass to Groovy RCE (CVE-2026-39816)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39816-apache-nifi-groovy-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39816-apache-nifi-groovy-rce/Critical severity — web · CVE-2026-39816. Status: Weaponized. Affects: Apache NiFi (with the optional graph bundle / nifi-other-graph-services-nar). Tags: apache-nifi, groovy, code-injection, privilege-escalation, rce, graph-bundle, authenticated.webCriticalapache-nifigroovycode-injectionprivilege-escalationrcegraph-bundleauthenticated