CVE-2021-21239-Exploit

详细报告如下 https://docs.google.com/document/d/157fGn7lLP1uBuRz8zUgRDWTDklKznljeOWwRQ-C6uFg/edit?usp=sharing 用法 python main.py...

CVE-2019-10172

CVE-2019-10172 https://vulners.com/cve/CVE-2019-10172 No se conoce ninguna versión no vulnerable de este componente/paquete. Se recomienda investigar componentes alternativos o un posible control de mitigación. Mitigación 1. Deseable Intentar cambiar el uso de com.codehaus.jackson por...

CVE-2025-12748

CVE-2025-12748 Eng Rus Créditos: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Incidencias: 687, 825 English Descripción Se descubrió un problema en el procedimiento de procesamiento de archivos XML. El procesamiento del contenido del archivo se realiza antes de la comprobación de ACL. Es...

CVE-2026-12752

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

EUVD-2026-78865

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

CVE-2026-12752 Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

CVE-2026-12752

IBM Business Automation Workflow (containers and traditional) is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker with low privileges could exploit this to expose sensitive information or consume memory resources . The assigned CVSS 3.1 score...

Vulnerability handling in Palo Alto Networks PAN-OS

Palo Alto Networks has identified a vulnerability in the PAN-OS software, specifically related to VM-Series and PA-Series firewalls, as well as the Panorama management software. The vulnerability involves a buffer overflow in the XML processing function of PAN-OS. Unauthorized attackers with...

EUVD-2026-78159

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-13287

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-13285

IBM MQ is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756

IBM Business Automation Workflow (containers and traditional) is vulnerable to an XML External Entity (XXE) injection when processing XML data. A remote attacker with low privileges could exploit this to expose sensitive information or consume memory resources . The vulnerability is rated CVSS 7....

CVE-2026-12756 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-13285

IBM MQ Managed File Transfer is vulnerable to XML external entity injection (XXE) in its template parser (CWE-611). A remote attacker with low privileges can exploit this over the network to expose sensitive information or consume memory resources, rated CVSS 7.1 HIGH (C:H, I:N, A:L). Affected ve...

EUVD-2026-78153

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

EUVD-2026-78151

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-13287

IBM MQ is vulnerable to an XML external entity injection (XXE) in the Managed File Transfer monitor result parser (CWE-611). A remote attacker with low privileges can exploit this to expose sensitive information or consume memory resources . Affected versions span 9.1 through 10.0.0.0 across LTS ...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerability...