186 matches found
CVE-2023-45612-PoC
CVE-2023-45612 https://nvd.nist.gov/vuln/detail/CVE-2023-45612 Description of CVE In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE. The vulnerability was patched by @marychatte on Sep 29, 2023 https://github.com/ktorio/ktor/pull/3770...
ktor-xxe-poc
CVE-2023-45612: JetBrains Ktor XXE Proof of Concept This repository contains a vulnerable Ktor server to demonstrate the XML External Entity XXE injection vulnerability identified in CVE-2023-45612. The vulnerability exists in Ktor versions before 2.3.5 when the ContentNegotiation plugin is used...
CVE-2026-68762
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
CVE-2026-68762: Loop with Unreachable Exit Condition
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
CVE-2023-45613
In JetBrains Ktor before 2.3.5 server certificates were not verified...
CVE-2022-38179
JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack...
CVE-2022-38180
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases...
CVE-2023-45612
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE...
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
CVE-2023-45612 PoC This repository contains a proof of concep...
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
ktor-xxe This project was created using the Ktor Project Gen...
JetBrains Ktor XXE
The vulnerability of the ContentNegotiation configuration in the JetBrains Ktor web application framework is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
ktor-xxe-poc This is a proof-of-concept reproducing the secur...
EUVD-2019-4325
Malware in sbrugna...
EUVD-2023-49905
Malicious code in bioql PyPI...
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
CVE-2023-45612 - https://nvd.nist.gov/vuln/detail/CVE-2023-456...
CVE-2024-49580
In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure...
CVE-2023-34339
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message...
CVE-2022-29035
In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...