CVE-2021-21239-Exploit

詳細レポートは以下 https://docs.google.com/document/d/157fGn7lLP1uBuRz8zUgRDWTDklKznljeOWwRQ-C6uFg/edit?usp=sharing 使用方法 python main.py...

CVE-2019-10172

CVE-2019-10172 https://vulners.com/cve/CVE-2019-10172 このコンポーネント/パッケージには、脆弱性のない既知のバージョンは存在しません。 代替コンポーネントまたは潜在的な緩和策を調査することを推奨します。 緩和策 1. 望ましい すべてのケースで com.codehaus.jackson の使用から com.fasterxml.jackson への切り替えを試み、com.codehaus.jackson ライブラリを削除する 2. パッチ適用済みライブラリを使用する:...

CVE-2025-12748

CVE-2025-12748 Eng Rus Credit: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Issues: 687, 825 English 説明 XMLファイルの処理手順に問題が発見されました。 ファイルの内容の処理は、ACL チェックの前に実行されます。これにより、権限が制限されたユーザーが特別に細工された XML ファイルを送信し、過剰なリソース消費を引き起こし、サービス拒否 DoS 攻撃の可能性をもたらします。 環境設定 1. OS: Alt Linux P10 server 2. 記事 ロシア語 に従...

CVE-2026-12752

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

EUVD-2026-78865

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

CVE-2026-12752 Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

CVE-2026-12752

IBM Business Automation Workflow (containers and traditional) is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker with low privileges could exploit this to expose sensitive information or consume memory resources . The assigned CVSS 3.1 score...

Vulnerability handling in Palo Alto Networks PAN-OS

Palo Alto Networks has identified a vulnerability in the PAN-OS software, specifically related to VM-Series and PA-Series firewalls, as well as the Panorama management software. The vulnerability involves a buffer overflow in the XML processing function of PAN-OS. Unauthorized attackers with...

EUVD-2026-78159

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-13287

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-13285

IBM MQ is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756

IBM Business Automation Workflow (containers and traditional) is vulnerable to an XML External Entity (XXE) injection when processing XML data. A remote attacker with low privileges could exploit this to expose sensitive information or consume memory resources . The vulnerability is rated CVSS 7....

CVE-2026-12756 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-13285

IBM MQ Managed File Transfer is vulnerable to XML external entity injection (XXE) in its template parser (CWE-611). A remote attacker with low privileges can exploit this over the network to expose sensitive information or consume memory resources, rated CVSS 7.1 HIGH (C:H, I:N, A:L). Affected ve...

EUVD-2026-78153

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

EUVD-2026-78151

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-13287

IBM MQ is vulnerable to an XML external entity injection (XXE) in the Managed File Transfer monitor result parser (CWE-611). A remote attacker with low privileges can exploit this to expose sensitive information or consume memory resources . Affected versions span 9.1 through 10.0.0.0 across LTS ...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerability...