Lucene search
+L

165 matches found

Kitploit
Kitploit
•added 2026/09/24 12:53 p.m.•11 views

ktor-xxe-poc

CVE-2023-45612: Prueba de concepto de XXE en JetBrains Ktor Este repositorio contiene un servidor Ktor vulnerable para demostrar la vulnerabilidad de inyección de entidad externa XML XXE identificada en CVE-2023-45612. La vulnerabilidad existe en versiones de Ktor anteriores a 2.3.5 cuando el...

9.8CVSS8.2AI score0.00595EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/24 11:51 a.m.•10 views

CVE-2023-45612-PoC

CVE-2023-45612 https://nvd.nist.gov/vuln/detail/CVE-2023-45612 Descripción de CVE En JetBrains Ktor anterior a 2.3.5, la configuración predeterminada de ContentNegotiation con formato XML era vulnerable a XXE. La vulnerabilidad fue corregida por @marychatte el 29 de septiembre de 2023...

9.8CVSS8.4AI score0.00595EPSS
SaveExploits6References1
Vulnrichment
Vulnrichment
•added 2026/08/17 3:54 p.m.•9 views

CVE-2026-68762

In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...

5.9CVSS5.2AI score0.00367EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•4 views

CVE-2026-68762: Loop with Unreachable Exit Condition

In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...

5.9CVSS5.7AI score0.00367EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:27 a.m.•21 views

CVE-2023-45613

In JetBrains Ktor before 2.3.5 server certificates were not verified...

9.1CVSS6.9AI score0.00298EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:15 a.m.•22 views

CVE-2022-38179

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack...

6.1CVSS6.8AI score0.00472EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:15 a.m.•16 views

CVE-2022-38180

In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases...

6.5CVSS7.1AI score0.00718EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:58 a.m.•17 views

CVE-2023-45612

In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE...

9.8CVSS6.8AI score0.00595EPSS
SaveExploits6References1
GithubExploit
GithubExploit
•added 2025/11/07 6:44 p.m.•234 views

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

CVE-2023-45612 PoC This repository contains a proof of concep...

9.8CVSS6.9AI score0.00595EPSS
SaveExploits6
GithubExploit
GithubExploit
•added 2025/11/04 2:16 p.m.•251 views

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

ktor-xxe This project was created using the Ktor Project Gen...

9.8CVSS6.7AI score0.00595EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
•added 2025/10/21 12:00 a.m.•10 views

The vulnerability of the ContentNegotiation configuration of the JetBrains Ktor web application framework allows attackers to execute XXE attacks.

The vulnerability of the ContentNegotiation configuration in the JetBrains Ktor web application framework is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...

10CVSS7.3AI score0.00595EPSS
SaveExploits6References3Affected Software1
GithubExploit
GithubExploit
•added 2025/10/15 8:42 p.m.•199 views

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

ktor-xxe-poc This is a proof-of-concept reproducing the secur...

9.8CVSS7AI score0.00595EPSS
SaveExploits6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-4325

Malware in sbrugna...

9.8CVSS7AI score0.0222EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-49905

Malicious code in bioql PyPI...

9.1CVSS9.1AI score0.00298EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/10/03 2:59 p.m.•84 views

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

CVE-2023-45612 - https://nvd.nist.gov/vuln/detail/CVE-2023-456...

9.8CVSS7AI score0.00595EPSS
SaveExploits6
RedhatCVE
RedhatCVE
•added 2025/05/23 9:29 a.m.•20 views

CVE-2024-49580

In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure...

5.3CVSS6.5AI score0.00352EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 3:55 a.m.•15 views

CVE-2023-34339

In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message...

3.3CVSS7AI score0.0021EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 10:44 p.m.•18 views

CVE-2022-29035

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...

4CVSS7AI score0.00621EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:35 p.m.•21 views

CVE-2021-43203

In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...

7.5CVSS7.1AI score0.00864EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 7:26 p.m.•13 views

CVE-2021-25761

In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...

5.3CVSS6.8AI score0.00541EPSS
SaveExploits0References1
Rows per page
Query Builder