1356 matches found
SUSE-SU-2026:23311-1 Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...
OPENSUSE-SU-2026:21633-1 Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xmlrpc-c (UTSA-2026-102697)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102697 advisory. XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component. Tenable has extracte...
OESA-2026-3426 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
OESA-2026-3387 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
OESA-2026-3386 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
OESA-2026-3385 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
OESA-2026-3384 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
SUSE SLED15: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (SUSE-SU-2026:3572-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3572-1 advisory. This update for xmlrpc-c fixes the following issue: - CVE-2026-15928: reflected cross-site scripting XSS via HTML...
Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue: CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:3572-1 Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue: - CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769...
CVE-2026-15928
A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...
SUSE CVE-2026-15928
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...
PaperCut NG Unauthenticated XMLRPC Functionality Detection
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch. !/usr/bin/env python3 -- coding: utf-8 -- """PaperCut NG allows for unauthenticated...
Apache OFBiz - XML External Entity Injection Detection
The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...
WordPress XMLRPC Detection
Detects WordPress XMLRPC. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress XMLRPC.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress XMLRPC Detection', 'description': 'Detects WordPress XMLRPC.'...
CVE-2026-15928
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...
AZL-94010 CVE-2026-15928 affecting package xmlrpc-c 1.60.04-4
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component...