CVE-2023-45612-PoC

CVE-2023-45612 https://nvd.nist.gov/vuln/detail/CVE-2023-45612 CVE描述 在JetBrains Ktor 2.3.5之前，ContentNegotiation的默认配置与XML格式存在XXE漏洞。 该漏洞由@marychatte于2023年9月29日修复（https://github.com/ktorio/ktor/pull/3770），漏洞是由于外部库xmlutil version 0.86.1中的配置错误导致的供应链攻击。...

ktor-xxe-poc

ktor-xxe-poc 这是复现安全问题 CVE-2023-45612 的概念验证项目。 使用的版本 Ktor: 2.2.3 xmlutil: 0.84.3 Java: 17.0.6 Gradle: 9.1.0 Python: 3.13.7 如何运行 1. 构建并运行服务器： ./gradlew build ./gradlew run 2. 测试 XXE 载荷： python test.py 服务器将在 http://localhost:8080 上运行。...

EUVD-2023-0377

Malicious code in bioql PyPI...

CVE-2023-24162

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...

OSV-2025-240 Security exception in com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=406332767 Crash type: Security exception Crash state: com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0 com.powsybl.commons.xml.XmlUtil.readSubElements com.powsybl.commons.xml.XmlUtil.skipSubElements...

CVE-2024-50614

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

AZL-51888 CVE-2024-50615 affecting package blobfuse 1.4.5-17

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50615

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

AZL-51871 CVE-2024-50615 affecting package cppcheck 2.7-2

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

AZL-51884 CVE-2024-50615 affecting package cppcheck for versions less than 2.18.3-1

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50614

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50614

The TinyXML2 C++ XML parser (versions through 10.0.0 ) contains a reachable assertion for UINT_MAX/16 within the tinyxml2.cpp XMLUtil::GetCharacterRef function. This vulnerability can lead to an unexpected application exit . Affected software includes cppcheck (versions less than 2.18.3-1 ) and v...

CVE-2024-50615

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50614

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50615

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50615: Reachable Assertion

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

TinyXML2 安全漏洞

TinyXML2 is a C++ based open source XML parser by Lee Thomason, an individual developer. A security vulnerability exists in TinyXML2 10.0.0 and earlier versions, which stems from a reachable assertion against UINTMAX/16 in tinyxml2.cpp XMLUtil::GetCharacterRef, which may cause the application to...

CVE-2024-50614

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50614: Reachable Assertion

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2024-50615

TinyXML2 versions through 10.0.0 are vulnerable to a reachable assertion in the tinyxml2.cpp file within the XMLUtil::GetCharacterRef function. This issue, caused by a UINT_MAX/digit calculation, may result in an application exit . The vulnerability affects various distributions and packages, inc...