CFADVISORY-CL-application-security-waf-waf-release-2025-05-05

Exploit Intelligence

• POC for CVE-2025-24893 (github-poc-repo)
• POC for CVE-2025-24893 (github-poc)
• CVE-2025-24893 tool (github-poc)
• OSCP like CVE-2025-24893 exploit for Linux XWiki (github-poc-repo)
• OSCP like CVE-2025-24893 exploit for Linux XWiki (github-poc)
• Exploit de Execução Remota de Código (RCE) no XWiki (github-poc)
• Exploit de Execução Remota de Código (RCE) no XWiki (github-poc-repo)
• Verified vulnerability journey for CVE-2025-8110 (Gogs) and CVE-2025-3248 (Langflow) — risk triage, exploitability verification, verified patches. (github-poc-repo)
• PoC for achieving RCE in Langflow versions <1.3.0 (github-poc-repo)
• this is a poc for the CVE-2025-24893 (github-poc-repo)

…and 87 more exploits

Timeline

• May 5, 2025 CVE Published
• Jun 28, 2025 PoC Published

References

• WAF - WAF Release - 2025-05-05 advisory