CVE-2022-24449

CVE-2022-24449 Solar Appscreener XXE 권장 설명 Solar AppScreener SAST 도구 3.10.4 이하 버전에서 문제가 발견되었습니다. 인가되지 않은 공격자는 만료되었거나 설치되지 않은 라이선스가 있는 호스트에 특수하게 조작된 XML 파일을 업로드하여 취약한 버전이 설치된 호스트를 악용할 수 있습니다. 최소 승인된 영향은 XXE-SSRF입니다. 추가 정보 수정됨: 3.10.4 취약점 유형 기타 CWE-611: XML 외부 엔터티 참조의 부적절한 제한 제품 공급업체 SOLAR SECURITY...

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 or others GIOP + send jta rmi or others...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ 開示状況: 本リポジトリのすべての調査結果は、 2026年5月〜6月の間にHPE Networkingバグ報奨金プログラムBugcrowdへ提出されました。 6件の提出のうち5件は、提出された証拠の技術的な整合確認が行われないまま、 トリアージ段階で「該当なしNot Applicable」とクローズされました。 2026年6月時点で修正は一切リリースされていません。 完全なライトアップのソース https://netacoding.com/posts/ghost-leak/ https://netacoding.com/posts/smurf-reflection/...

CVE-2025-47293

CVE-2025-47293 concerns PowSyBl (Power System Blocks) where powsybl-core XML parsing via com.powsybl.commons.xml.XmlReader is vulnerable to XXE and SSRF. The root cause is treating XmlReader as trusted when untrusted XML (CGMES/XIIDM) is submitted, allowing privilege escalation to read sensitive ...

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible...

Command injection

/api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and MEDION LifeCloud, has an XXE vulnerability that can be chained with an SSRF bug to gain remote command execution as root. It can be triggered by anyone who knows the IP address of the affected device...