xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

CVE-2024-45409

Ruby-SAML / GitLab Authentication Bypass CVE-2024-45409 exploit This script exploits the CVE-2024-45409 that allows an unauthenticated attacker with access to any signed SAML document issued by the IDP to forge a SAML Response/Assertion and gain access as any user on GitLab. All the following...

CVE-2024-36401-poc

CVE-2024-36401 — GeoServer OGC XPath Injection RCE Unauthenticated Remote Code Execution exploit for GeoServer via OGC filter valueReference parameter injection XPath/JXPath evaluation. Disclaimer: This tool is intended for authorized penetration testing and security research only. Do not use...

CVE-2026-58395

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase interpolates an unvalidated safe-delete token from the request URL into an XPath expression over config.xml before confirming that the...

CVE-2026-58395 OPNsense: XPath injection in MVC safe-delete

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase interpolates an unvalidated safe-delete token from the request URL into an XPath expression over config.xml before confirming that the...

CVE-2026-58395

OPNsense versions prior to 26.1.11 are vulnerable to an XPath injection vulnerability in the ApiMutableModelControllerBase::delBase() safe-delete path. The flaw occurs because an unvalidated safe-delete token from the request URL is interpolated into an XPath expression against config.xml before ...

CVE-2026-58395 OPNsense: XPath injection in MVC safe-delete

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase interpolates an unvalidated safe-delete token from the request URL into an XPath expression over config.xml before confirming that the...

CVE-2026-53582

The OPNsense firewall and routing platform (prior to version 26.1.10 ) is vulnerable to a stored XPATH injection in its Trust module. The root cause is the interpolation of attacker-controlled certificate authority and certificate refid values into XPath expressions within CAsField.php and Certif...

CVE-2026-53582 OPNsense: XPATH Injection can disclose any secret in config.xml

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsField.php an...

CVE-2026-53582 OPNsense: XPATH Injection can disclose any secret in config.xml

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsField.php an...

CVE-2025-11844-smolagents

🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11844 An educational auditing sandbox and dynamic proof-of-concept scanner demonstrating the XPath Injection vulnerability found within Hugging Face's smolagents library up to version 1.2.0. 🔍 Vulnerability Profile Metric| Details ---|---...

CVE-2026-110084

Adobe Experience Manager is affected by an XML Injection aka Blind XPath Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitatio...

CVE-2026-110084 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

Adobe Experience Manager is affected by an XML Injection aka Blind XPath Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitatio...

CVE-2026-110084

Adobe Experience Manager is affected by an XML Injection (Blind XPath Injection) vulnerability (CWE-91). A low-privileged attacker can exploit this flaw to bypass security features and gain unauthorized read and limited write access . This vulnerability does not require any user interaction for e...

CVE-2026-110084: XML Injection (aka Blind XPath Injection)

Adobe Experience Manager is affected by an XML Injection aka Blind XPath Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitatio...

xpath

xpath Advanced XPath injection scanner for authorized security testing. Coded by Chokri Hammedi blue0x1 · MIT Licensed Overview xpath is a fast, multi-technique XPath injection scanner written in Nim. It focuses on practical detection, response comparison, visible extraction, blind extraction, an...

xcat

XCat XCat es una herramienta de línea de comandos para explotar e investigar vulnerabilidades de inyección XPath ciega. Para una referencia completa, lee la documentación aquí: https://xcat.readthedocs.io/en/latest/ Soporta una gran cantidad de características: Selecciona automáticamente...

Linux Distros Unpatched Vulnerability : CVE-2026-103044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML injection aka blind XPath injection vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects...

EUVD-2026-89480

XML injection aka blind XPath injection vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-103044

XML injection aka blind XPath injection vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10...