CVE-2025-27136

CVE-2025-27136 Exploiting an XML External Entity XXE Vulnerability. Use XML Payload to Grab Sensitive Files PoC test.xml Use curl to upload test.xml from our local machine to the bucket. curl -X PUT http://127.0.0.1:PORT/TB1 -H "Content-Type: application/xml" -d @test.xml Trigger the Exploit & Gr...

CVE-2020-26259

Description XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights. Influence Xstream \n" + " \n" + " \n" + " 0\n" + " \n" + " \n" + " \n" + " text/plain\n" + " \n" + " C:\Al1ex.txt\n" + " \n" + " \n" + " \n"...

crack-0.1.8-fixed

= crack Really simple JSON and XML parsing, ripped from Merb and Rails. The XML parser is ripped from Merb and the JSON parser is ripped from Rails. I take no credit, just packaged them for all to enjoy and easily use. == note on releases Releases are tagged on github and also released as gems on...

CVE-2021-29447

WordPress 5.6-5.7 - Authenticated Author+ XXE CVE-2021-29447 Using Step1. Run WordPress $ make up-wp Step2. Run Attacker web server $ make up-mal Step3. Generate malicious WAV file Without wavefile npm Recommend $ echo -en 'RIFF\xb8\x00\x00\x00WAVEiXML\x7b\x00\x00\x00%remote;%init;%trick; \x00'...

cve-2023-45612_exploit

cve-2023-45612exploit CVE-2023-45612 is a high severty security probem that allows XXE XML eXternal Entity attacks on Ktor's XML serialization that has been patched in 2023. Reproduction of the security problem Below is a detailed way of how I reproduced the problem. IntelliJ IDEA project First, ...

CVE-2024-45427-Exploit

CVE-2024-45427 Exploit Generator This script generates a malicious Excel .xlsx file to exploit CVE-2024-45427 in PhpSpreadsheet library v3.7.0. It injects an XSS payload into the sheet name by manipulating the raw XML, bypassing standard library validation checks. Usage 1. Edit exploit.py and set...

dita-structure-translation-poc

DITA structure translation PoC Short experiment: can a 4-bit...

jsonorg-tp1

json.org CVE-2022-45688 vrai positif Le projet illustre CVE-2022-45688 dans json.org -- il y a une application simple XML2JSONConverter pour lire du XML depuis l'entrée, le convertir en JSON et l'afficher joliment formaté sur la console. En utilisant une entrée malveillante, l'application plante...

[SECURITY] Fedora 45 Update: xgrep-0.08-37.fc45

XGrep provides facilities for searching content in XML files. The search is specified either as an XPath via the -x flag, or a custom syntax including extended regular expressions via the -s flag...

[SECURITY] Fedora 45 Update: R-XML-3.99.0.23-3.fc45

Many approaches for both reading and creating XML and HTML documents including DTDs, both local and accessible via HTTP or FTP. Also offers access to an XPath "interpreter"...

[SECURITY] Fedora 45 Update: php-pecl-xmlrpc-1.0.0~rc3-20.fc45

This extension provides functions to write XML-RPC servers and clients. You can find more information about XML-RPC at http://www.xmlrpc.com/, and more documentation on this extension and its functions at https://www.php.net/xmlrpc. The extension is unbundled from php-src as of PHP 8.0.0, because...

[SECURITY] Fedora 45 Update: perl-XML-LibXML-Devel-SetLineNumber-0.002-35.fc45

If you are, say, writing a parser for a non-XML format that happens to have an XML-like data model, then you might wish to parse your format into an XML::LibXML document with elements, attributes and so on. And you might want all those nodes to return the correct line numbers when the "linenumber...

[SECURITY] Fedora 45 Update: perl-XML-LibXML-2.0213-4.fc45

This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation...

[SECURITY] Fedora 45 Update: perl-RDF-Trine-Node-Literal-XML-0.16-23.fc45

This Perl module encapsulates XML literals into RDF objects...

[SECURITY] Fedora 45 Update: libxml2-2.15.4-1.fc45

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

[SECURITY] Fedora 45 Update: GAPDoc-1.6.10-4.fc45

This package describes a document format for writing GAP documentation. The idea is to define a sufficiently abstract markup language for GAP documentation which can be relatively easily converted into different output formats. We used XML to define such a language. This package provides: -...

[SECURITY] Fedora 45 Update: docbook-dtds-1.0-93.fc45

The DocBook Document Type Definition DTD describes the syntax of technical documentation texts articles, books and manual pages. This syntax is XML-compliant and is developed by the OASIS consortium. This package contains SGML and XML versions of the DocBook DTD...

CVE-2026-95369

An inappropriate implementation flaw was found in the XML component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513049042...

Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution

Copernik XML Factory through 0.1.1, when running on its stock JDK provider, does not block XInclude resource resolution after an application enables XInclude on a factory returned by XmlFactories.newDocumentBuilderFactory or XmlFactories.newSAXParserFactory, or on an XMLReader passed through...

GHSA-XM28-XVQC-GXXG Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution

Copernik XML Factory through 0.1.1, when running on its stock JDK provider, does not block XInclude resource resolution after an application enables XInclude on a factory returned by XmlFactories.newDocumentBuilderFactory or XmlFactories.newSAXParserFactory, or on an XMLReader passed through...