54744 matches found
xmloxide
xmloxide Una reimplementazione in Rust puro di libxml2 — la libreria di parsing XML/HTML de facto standard nel mondo open-source. libxml2 è diventata ufficialmente non mantenuta a dicembre 2025 con problemi di sicurezza noti. xmloxide punta ad essere un sostituto memory-safe e ad alte prestazioni...
etl-parser
etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...
AgentCyTE
CORE TopoGen Genera topologie di rete CORE riproducibili da file XML di scenario utilizzando una ricca GUI Web o un'interfaccia a riga di comando. Indice dei contenuti Punti salienti Schermate Avvio rapido Prerequisiti Installa le dipendenze Avvia la Web UI Esegui la CLI Flusso di lavoro...
ROOT-OS-DEBIAN-13-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root
Root has patched CVE-2026-56409 in the expat package for Root:Debian:13. Multiple fixed versions available...
Oracle WebLogic Server - Remote Command Execution
The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. id: CVE-2019-2725 info: name: Oracle WebLogic...
xmlrpc-brute
Ferramenta de Força Bruta WordPress XML-RPC Uma ferramenta projetada para testar sites WordPress em busca de vulnerabilidades XML-RPC, tentando forçar credenciais de usuário através da interface XML-RPC. Descrição Esta ferramenta testa instalações WordPress em busca de vulnerabilidades de...
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
POC-CVE-2025-66034
fontvarlib.py — CVE-2025-66034 fontTools varLib — Scrittura Arbitraria di File + Iniezione XML → Esecuzione Remota di Codice Indice Panoramica Dettagli della vulnerabilità Catena di attacco Requisiti Installazione Configurazione Utilizzo Come funziona Codice vulnerabile Checklist pre-sfruttamento...
CVE-2025-69212_PoC
CVE-2025-69212: OpenSTAManager Proof of Concept PoC Questo repository contiene un Proof of Concept PoC che dimostra la vulnerabilità identificata come CVE-2025-69212 in OpenSTAManager, una vulnerabilità di iniezione di comandi nel sistema operativo causata dalla funzionalità di decodifica dei fil...
ktor-xxe-poc
CVE-2023-45612: JetBrains Ktor XXE Proof of Concept Dieses Repository enthält einen anfälligen Ktor-Server, um die XML-External-Entity-Injection-Schwachstelle XXE zu demonstrieren, die in CVE-2023-45612 identifiziert wurde. Die Schwachstelle ist in Ktor-Versionen vor 2.3.5 vorhanden, wenn das...
jsonorg-tp1
json.org CVE-2022-45688 vero positivo Il progetto illustra CVE-2022-45688 in json.org -- c'è una semplice applicazione XML2JSONConverter per leggere XML dall'input, convertirlo in JSON e stamparlo in modo formattato sulla console. Utilizzando un input dannoso, l'applicazione va in crash con uno...
CVE-2026-62385
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit framebyname, doc, lu, and header methods wi...
EUVD-2026-64337
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit framebyname, doc, lu, and header methods wi...
CVE-2026-62385 NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit framebyname, doc, lu, and header methods wi...
CVE-2026-62385
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader . By supplying unsafe selectors or poisoned index state, an attacker can exploit the frame_by_name, doc, lu, and header methods to parse XML files outside the corpus root, enabling arbi...
CVE-2026-62385 NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit framebyname, doc, lu, and header methods wi...
apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack
A flaw was found in Apache Portable Runtime Utility apr-util. A remote attacker could exploit a stack recursion vulnerability by providing specially crafted XML input to a library consumer that uses the aprxmlquoteelem function. This could lead to a denial of service DoS due to an application cra...
Linux Distros Unpatched Vulnerability : CVE-2026-62385
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside...
CVE-2026-73507
A flaw was found in Netty's XmlFrameDecoder component. An unauthenticated remote attacker could send specially crafted XML closing-tag sequences. This could cause the system to repeatedly rescan accumulated data, leading to high CPU utilization and a denial of service DoS...