PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-47114] How we got persistent XSS on every AEM cloud site, thrice

slcyber.io | vulnerability | CVE-2025-47114 | #cloud | #vulnerability-research | #xss
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Assetnote discovers and exploits persistent XSS three consecutive times on all 45,000+ AEM cloud sites via CDN proxy misconfiguration.
CVE
CVE-2025-47114
Published
Collected

Related coverage

vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
vulnerability · horizon3.ai
[CVE-2020-35124] Unauthenticated XSS to Remote Code Execution Chain in Mautic < 3.2.4
# Unauthenticated XSS to Remote Code Execution Chain in Mautic ` page. Below we dump the contents of the `/etc/passwd` file on the Mautic server. And upgrading to a reverse shell using a Python...
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
vulnerability · bishopfox.com
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CVE-2026-58113 is a zero-interaction XSS in Siemens Teamcenter’s login redirect that let Bishop Fox silently reassign workflow delegation on a victim’s…
vulnerability · yeswehack.com
How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEs
Learn how to find IDOR, stored XSS and information disclosure vulnerabilities with practical tips and techniques from YesWeHack’s top-ranked bug hunters.
Back