Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

GeoNetwork - PreAuth Remote Code Execution

ethiack.com | research | #rce | #open-source | #pre-auth | #xslt | #geospatial | #geonetwork

Summary

Four bugs in the GeoNetwork geospatial catalog include a missing @PreAuthorize check enabling unauthenticated file upload and remote code execution via an unsafe Saxon XSLT configuration.
Published
Collected

original ↗

Related coverage

  1. SharePoint ToolShell – One Request PreAuth RCE Chain (blog.viettelcybersecurity.com)
  2. Getting XXE in Web Browsers using ChatGPT (swarm.ptsecurity.com)
  3. From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse (lab.ctbb.show)
  4. How Two WordPress Core Bugs Chained into Pre-Auth RCE (bugbunny.ai)
  5. CVE-2026-8054 — dotCMS Core Publish Audit API SQL Injection (aretiq.ai)
  6. ToolShell - A Critical SharePoint Vulnerability Chain under Active Exploitation (blog.viettelcybersecurity.com)

back