CloudBees Jenkins DRY plugin XML external entity injection vulnerability

CloudBees Jenkins is the U.S. CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . DRY Plugin is used in one of the duplicate code to simplify t...

The vulnerability of the NEXTL parser for XML files (parser.c) in the libxml2 library allows a hacker to inject XML entities.

The vulnerability of the NEXTL parser for XML files parser.c in the libxml2 library arises from an out-of-buffer operation in memory. Exploiting this vulnerability allows a malicious actor to inject XML entities through an intentionally crafted DTD name that contains the character “%”...

Cisco AnyConnect Profile Editor XML External Entity Injection Vulnerability

Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. the Profile Editor is one of the Profile Document Editors. An XML external entity injection vulnerability exists in the Profile Editor in the...

PHPSHE open source mall system onotify_url.php page exists external entity injection vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system onotifyurl.php page...

CVE-2017-1666

IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager) versions 2.5–2.5.0.8, 2.6–2.6.0.3, and 2.7–2.7.0.2 are affected by a XML External Entity (XXE) vulnerability when processing XML data. The root cause is an XXE flaw in XML processing, allowing a remote attacker to potentia...

CVE-2017-1666

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 133540...

Change Healthcare Conserus Image Repository archive solution XML External Entity Injection Vulnerability

Change Healthcare Conserus Image Repository archive solution is a medical diagnostic image storage solution from Change Healthcare, USA. An XML external entity injection vulnerability exists in Change Healthcare Conserus Image Repository archive solution version 2.1.1.105. A remote attacker can...

jBPM Migration XML External Entity Injection Vulnerability

jBPM Migration is a migration tool. jBPM Migration is implemented with an XML external entity injection vulnerability that can be exploited by remote attackers to submit a special request, obtain sensitive information, or conduct a denial of service attack...

JDK: XML External Entity Injection (XXE) error when processing XML data

IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150...

Xml Entity Injection Vulnerability in Carrier System of ZTE Softtronics Co.

ZTE SoftTronics has built a customer-centered business model of "productized software + professional services" to become an outstanding software and service provider. An xml entity injection vulnerability exists in the operator system of ZTE Softtronics Corporation, which can be exploited by an...

CVE-2017-11286

Adobe ColdFusion has an XML external entity XXE injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11...

XML Entity Injection Vulnerability in Pelco Sarix Pro Webcam import.cgi

pelco Sarix Professional is a video camera. An XML entity injection vulnerability in import.cgi in the pelco Sarix Pro webcam allows attackers to exploit the vulnerability to obtain sensitive information...

XML External Entity (XXE) Injection

slimphp is vulnerable to XML External Entity XXE Injection attacks. The library does not restrict external entities from being arbitrary loaded to when parsing XML files...

CVE-2017-1477

IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612...

CVE-2017-1477

IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612...

Xxe

IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612...

CVE-2017-1477

IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612...

CVE-2017-1477

Summary: CVE-2017-1477 affects IBM Security Access Manager Appliance 9.0.3.0, where an XML External Entity (XXE) vulnerability exists when processing XML data, potentially exposing sensitive information or exhausting memory resources. Affected product/versions (per sources): IBM Security Access M...

MacCMS suffers from xml entity injection vulnerability

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. MacCMS suffers from an xml entity injection vulnerability due to the system failing to disable XML entity parsing. An attacker can construct malicious requests to execute system commands on the target host t...

Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection Vulnerabilities

Exploit for unknown platform in category web applications Exploit Title: Mura CMS before 6.2 SSRF + XXE Date: 30-10-2017 Exploit Author: Anthony Cole Vendor Homepage: http://www.getmura.com/ Version: before 6.2 Contact: http://twitter.com/acole76 Website: http://twitter.com/acole76 Tested on:...