54744 matches found
CVE-2026-47080
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for :cdata...
CVE-2026-48590
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...
CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...
CVE-2026-48590
CVE-2026-48590 is an XML Injection vulnerability in the Elixir library xml_builder (by joshnuss), affecting versions 0.0.1 through before 2.4.1 . The root cause is that element names, attribute names, and doctype identifiers are interpolated verbatim into the serialized XML output without escapin...
EUVD-2026-63879
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...
EUVD-2026-63878
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for :cdata...
CVE-2026-47080 CDATA Section Breakout via Unsanitised ]]> in xml_builder
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for :cdata...
CVE-2026-47080
CVE-2026-47080 is an XML Injection vulnerability in the joshnuss xml_builder Elixir library (versions 0.0.7 through before 2.4.1 ). The root cause is in XmlBuilder.escape/1 within lib/xml_builder.ex: when handling {:cdata, data}, the data is placed verbatim between without splitting on embedded ...
UBUNTU-CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language...
Linux Distros Unpatched Vulnerability : CVE-2026-76641
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parse...
UBUNTU-CVE-2026-76956
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...
XOE
XOE XXE आउट-ऑफ़-बैंड भेद्यता का आसानी से शोषण करें विवरण यह उपकरण एक xml फ़ाइल बनाता है जिसमें आपके द्वारा दर्ज किया गया ip और पोर्ट होता है और प्रतिक्रिया के लिए कनेक्शन सुनता है :D स्क्रीनशॉट...
JDSer-ngng
JDSer-ngng एक Burp Extender प्लगइन, जो Java ऑब्जेक्ट्स को deserialize करेगा और उन्हें Xtream लाइब्रेरी का उपयोग करके XML में एन्कोड करेगा। क्यों? यह रिलीज़ JDSer-ng के दूसरे इम्प्लीमेंटेशन में मौजूद बग को ठीक करती है, जो वास्तव में अनुरोध में संशोधन की अनुमति नहीं देता था। साथ ही यह इसे और आगे...
libtaxii
libtaxii Eine Python-Bibliothek für die Verarbeitung von Trusted Automated eXchange of Indicator Information TAXII™ v1.x-Nachrichten und den Aufruf von TAXII-Diensten. :Source: https://github.com/TAXIIProject/libtaxii/ :Documentation: https://libtaxii.readthedocs.io/ :Information:...
CVE-2026-76641
Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...
CVE-2026-76641 Expat Out-of-Bounds Read via dtdCopy
Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...
CVE-2026-76641 Expat Out-of-Bounds Read via dtdCopy
Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...
EUVD-2026-63493
Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...
CVE-2026-76641 Expat Out-of-Bounds Read via dtdCopy
Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...
CVE-2026-76641
Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...