Wiki — PoC Archivehttps://poc.intelseclab.com/tags/wiki/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000XWiki SolrSearch Macro Unauthenticated Groovy RCE (CVE-2025-24893)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-24893-xwiki-solrsearch-groovy-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-24893-xwiki-solrsearch-groovy-rce/Critical severity (CVSS 9.8) — web · CVE-2025-24893. Status: Weaponized. Affects: XWiki (SolrSearch macro, Main.SolrSearch). Tags: xwiki, groovy, rce, unauthenticated, cwe-94, code-injection, reverse-shell, python, wiki.webCriticalxwikigroovyrceunauthenticatedcwe-94code-injectionreverse-shellpythonwikiGogs Wiki Arbitrary File Deletion via Path Traversal (CVE-2026-24135)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24135-gogs-wiki-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24135-gogs-wiki-path-traversal/High severity (CVSS 7.5) — web · CVE-2026-24135 (GHSA-jp7c-wj6q-3qf2). Status: PoC. Affects: Gogs self-hosted Git service. Tags: gogs, path-traversal, arbitrary-file-deletion, wiki, git-service, authenticated, go.webHighgogspath-traversalarbitrary-file-deletionwikigit-serviceauthenticatedgo