⤷ Title: CVSS 9.9: Critical XXE Flaw in GeoTools Exposes Geospatial Data Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:34:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Data Breach #geospatial #GeoTools #java #Remote Code Execution #XML External Entity #xxe
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:34:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Data Breach #geospatial #GeoTools #java #Remote Code Execution #XML External Entity #xxe
Daily CyberSecurity
CVSS 9.9: Critical XXE Flaw in GeoTools Exposes Geospatial Data Systems
A critical XXE vulnerability (CVSS 9.9) in GeoTools llows data disclosure and RCE. Update immediately to patched versions!
⤷ Title: GeoServer Unauthenticated SQL Injection (CVSS 9.8) Exploited in the Wild, PoC Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 04:35:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #exploited in the wild #GeoServer #GeoTools #jsonArrayContains #proof_of_concept #RondoDox #sql injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 04:35:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #exploited in the wild #GeoServer #GeoTools #jsonArrayContains #proof_of_concept #RondoDox #sql injection
Daily CyberSecurity
GeoServer Unauthenticated SQL Injection (CVSS 9.8) Exploited in the Wild, PoC Public
TL;DR A GeoServer unauthenticated SQL injection flaw is under active attack. It lives in the jsonArrayContains filter function against PostGIS layers. Attackers began probing within hours of publi…