Oracle CTI Web Service - 'EBS_ASSET_HISTORY_OPERATIONS' XML Entity Injection

Exploit Title: Oracle CTI Web Service XML Entity Exp. Exploit Author: omurugur Author Web: https://www.justsecnow.com Author Social: @omurugurrr URL : http://server/EBSASSETHISTORYOPERATIONS As can be seen in the following request / response example, the xml entity expansion attack can be...

Oracle CTI Web Service - (EBS_ASSET_HISTORY_OPERATIONS) XML Entity Injection Exploit

Exploit for java platform in category web applications Exploit Title: Oracle CTI Web Service XML Entity Exp. Exploit Author: omurugur Author Web: https://www.justsecnow.com Author Social: @omurugurrr URL : http://10.248.68.188/EBSASSETHISTORYOPERATIONS As can be seen in the following request /...

Oracle CTI Web Service - EBS_ASSET_HISTORY_OPERATIONS XML Entity Injection

Oracle CTI Web Service - EBSASSETHISTORYOPERATIONS XML Entity Injection Exploit Title: Oracle CTI Web Service XML Entity Exp. Exploit Author: omurugur Author Web: https://www.justsecnow.com Author Social: @omurugurrr URL : http://server/EBSASSETHISTORYOPERATIONS As can be seen in the following...

Oracle Java SE XML External Entity Injection Information Disclosure (CVE-2017-10309)

An XML external entity injection vulnerability exists in Oracle Java SE. A remote unauthenticated attacker could exploit this vulnerability to disclose sensitive information on the affected target host...

Jenkins Swarm Plugin XML External Entity Injection (CVE-2019-10309)

An information disclosure vulnerability exists in Jenkins Swarm Plugin. Successful exploitation of this vulnerability could lead to the disclosure of arbitrary files from the client...

Xxe

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129...

CVE-2019-4208

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129...

Security Bulletin: IBM TRIRIGA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data (CVE-2019-4208)

Summary IBM TRIRIGA is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Vulnerability Details CVEID: CVE-2019-4208 DESCRIPTION: IBM TRIRIGA is...

Xxe

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity XXE Injection...

XML External Entity (XXE) Attacks

IBM SDK, Java Technology Edition is vulnerable to XML External Entity Injection XXE. This error occurs when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources...

JC6 Collaborative OA platform has xml entity injection vulnerability

JC6 collaborative OA platform is a collaborative office platform based on the J2EE framework. JC6 collaborative OA platform xml entity injection vulnerability, an attacker can use the vulnerability to read arbitrary files...

Oracle Business Intelligence / XML Publisher XML External Entity Injection (CVE-2019-2616)

An XML External Entity Injection vulnerability exists in Oracle Business Intelligence and XML Publisher. Successful exploitation of this vulnerability could result in unauthorized access to critical data in Oracle BI Publisher...

Oracle Business Intelligence XML Publisher 11.1.1.9.0 12.2.1.3.0 12.2.1.4.0 - XML External Entity Injection

Oracle Business Intelligence XML Publisher 11.1.1.9.0 12.2.1.3.0 12.2.1.4.0 - XML External Entity Injection Exploit Title: XXE in Oracle Business Intelligence and XML Publisher Date: 16.04.19 Exploit Author: @vah13 Vendor Homepage: http://oracle.com Software Link:...

Microsoft Internet Explorer 11 - XML External Entity Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft Internet Explorer v11 latest version...

Microsoft Internet Explorer 11 - XML External Entity Injection

Microsoft Internet Explorer 11 - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt + ISR: ApparitionSec Vendor...

Airsonic XXE Vulnerability

Airsonic is a free and open source community-driven media server that provides access to music. Airsonic versions prior to 10.1.2 are vulnerable to an XXE XML External Entity Injection vulnerability during parsing. No detailed vulnerability details are provided at this time...

CVE-2019-4043

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239...

Xxe

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239...

CVE-2019-4043

IBM Sterling B2B Integrator (Standard Edition) vulnerable to XML External Entity (XXE) injection under CVE-2019-4043. Affected: versions 5.2.0 snf 6.0.0.0 and 6.0.0.0. Impact per IBM: potential disclosure of sensitive data or memory resource consumption. Remediation from IBM bulletin: upgrade to ...

CVE-2019-4043

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239...