EUVD-2026-67073

NLTK: Quadratic CPU Exhaustion in XMLCorpusView.readxmlfragment...

GHSA-VP2X-QP44-57V7 NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

Summary XMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appending each block to a growing fragment string, then calls VALIDXMLRE.matchfragment on the full accumulated buffer every iteration. Because each iteration rescans the entire accumulated fragment, the total amount of wor...

NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

Summary XMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appending each block to a growing fragment string, then calls VALIDXMLRE.matchfragment on the full accumulated buffer every iteration. Because each iteration rescans the entire accumulated fragment, the total amount of wor...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

NetSec-CVE-2023-4357

Proyecto de Seguridad de Redes — CVE-2023-4357 Descripción general Este proyecto es un proyecto final para un curso de Seguridad de Redes. El proyecto se centra en CVE-2023-4357, una vulnerabilidad que afecta a versiones de Google Chrome anteriores a la 116.0.5845.96. La vulnerabilidad está...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

CVE-2014-0195

XML-RPC WordPress 暴力破解利用脚本 该仓库包含一个基于Python的概念验证（PoC）脚本，用于对存在CVE-2014-0195漏洞的WordPress实例进行登录凭据暴力破解。该漏洞利用XML-RPC的system.multicall函数，可以在单个HTTP请求中尝试多次登录请求，可能导致拒绝服务。此脚本旨在供网络安全专业人员评估WordPress安装的安全性。 免责声明 此代码仅供在授权系统上合法使用。未经授权使用此代码属违法行为，可能导致严重后果。在测试或利用不属于您的系统之前，始终获取明确许可。 漏洞概述 漏洞存在于WordPress的XML-RPC...

CVE-2020-4463

IBM Maximo Asset Management 存在通过 XXE 漏洞导致的信息泄露 CVE-2020-4463 IBM Maximo Asset Management 在处理 XML 数据时容易受到 XML 外部实体注入 XXE 攻击。远程攻击者可以利用此漏洞泄露敏感信息或消耗内存资源。 基础评分: 8.2 向量: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L 受影响的核心组件 IBM Maximo Asset Management 7.6.0 IBM Maximo Asset Management 7.6.1 IBM Maximo...

CVE-2020-2555

EXP prueba...

CVE-2022-0219

CVE-2022-0219 Jadx 在通过 -e 选项导出包含恶意构造的 AndroidManifest.xml / strings.xml 的 APK 文件到 gradle 时，容易受到 XML 外部实体限制不当 CWE-611 的攻击。 当从 CLI 使用时，可能导致本地文件泄露。当作为库使用时，如果 APK 文件来自不可信源，则可能导致本地文件泄露或拒绝服务。已知 GUI 不受影响。 原始报告：https://huntr.dev/bounties/0d093863-29e8-4dd7-a885-64f76d50bf5e/ 已在 jadx-1.3.2 中修复。...

CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

🛡️ CVE-2026-57588 - Framework de Explotación de Inyección SQL en Nessus 📋 Tabla de Contenidos Descripción General Detalles de la Vulnerabilidad Características Instalación Inicio Rápido Ejemplos de Uso Tipos de Payload Escenarios Avanzados Informes Solución de Problemas Consideraciones de Segurida...

CVE-2024-41817-poc

ImageMagick 任意代码执行漏洞 CVE-2024-41817 针对 ImageMagick 版本 = 9.4.0 Python 包： paramiko 安装 root@kitploit: git clone https://github.com/Dxsk/CVE-2024-41817-poc/ cd CVE-2024-41817-poc pip install -r requirements.txt 用法 自动检测易受攻击版本： root@kitploit: python3 exploit.py -H -p -u -P -d 仅构建载荷： root@kitploit:...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

CVE-2017-11610

Supervisord远程命令执行漏洞脚本（CVE-2017-11610） 漏洞简介 Supervisor 是一个用 Python 写的进程管理工具，可以很方便的用来在 UNIX-like 系统（不支持 Windows）下启动、重启（自动重启程序）、关闭进程（不仅仅是 Python 进程） Supervisor 是一个 C/S 模型的程序，supervisord 是 server 端，supervisorctl 是 client 端，简单理解就是client输入supervisor的指令调用server端的API从而完成一些工作。...

tinyxml

/ @mainpage TinyXML TinyXML 是一个简单、小巧的 C++ XML 解析器，可以轻松集成到其他程序中。 它能做什么。 简而言之，TinyXML 解析 XML 文档，并从中构建一个文档对象模型（DOM），该模型可以被读取、修改和保存。 XML 代表“可扩展标记语言”。它允许你创建自己的文档标记。HTML 在为浏览器标记文档方面做得非常好，而 XML 允许你定义任何类型的文档标记，例如描述一个用于日程管理应用程序的“待办事项”列表的文档。XML 是一种非常结构化且方便的格式。所有那些用于存储应用程序数据的随机文件格式都可以被 XML 取代。一个解析器适用于所有。...

ActiveMQ-RCE

ActiveMQ RCE Versiones afectadas versión open -a calculator Abre un servidor http root@kitploit: python3 -m http.server Ejecuta el archivo Main.java cambia la dirección según sea necesario...

ppsx-file-generator

Introducción Por Temesgen Yibeltal [email protected] Basado en el código de https://github.com/bhdresh/CVE-2017-8570 ahora eliminado ppsx-file-generator es una herramienta Python que genera un archivo de presentación de diapositivas de Power Point que ejecuta código desde una fuente remota...