204 matches found
CVE-2026-44036
A flaw was found in DCMTK's XML-to-DICOM converter. An attacker can exploit this vulnerability by supplying a crafted XML file containing deeply nested elements. When parsed, this input triggers uncontrolled recursion that exhausts stack memory and crashes the application, resulting in a Denial o...
Google Chrome XML Component Confidential Data Access
The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created XML file...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. Chromium security severity: Medium...
EUVD-2026-34469
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. Chromium security severity: Medium...
CVE-2026-11169
A vulnerability in the XML implementation of Google Chrome (prior to version 149.0.7827.53 ) allows a remote attacker to perform a User Experience Cross-Site Scripting (UXSS) attack. By providing a specially crafted XML file, an attacker can inject arbitrary scripts or HTML . Additionally, specif...
CVE-2026-11169
Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted XML file. Chromium security severity: Medium...
CVE-2026-11035
An inappropriate implementation in Custom Tabs within Google Chrome on Android (prior to version 149.0.7827.53) allows a local attacker to perform privilege escalation by providing a crafted XML file . The vulnerability is associated with CWE-20 (Improper Input Validation). While the CVSS3.1 scor...
CVE-2026-31248
Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...
FacturaScripts 2025.43 - XSS
Exploit Title: FacturaScripts 2025.43 - XSS Date: 30-12-2025 Exploit Author: VETTRIVEL U Author Profile: https://www.linkedin.com/in/vettrivel2006 Vendor Homepage: https://facturascripts.com/ Software Link: https://github.com/NeoRazorX/facturascripts Affected Versions: = 2025.4, = 2025.11, =...
perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files
A flaw was found in XML::Parser, a Perl module for parsing XML. This vulnerability, an off-by-one heap buffer overflow, occurs when processing an XML file with very deep element nesting. A remote attacker could exploit this by providing a specially crafted XML file, potentially leading to memory...
CVE-2026-33899
A flaw was found in ImageMagick. When processing a specially crafted XML file, a remote attacker could exploit an out-of-bounds write vulnerability. This could lead to a denial of service, making the affected program unavailable. Mitigation Mitigation for this issue is either not available or the...
CVE-2025-67289
The Frappe Framework (version 15.89.0 ) contains an arbitrary file upload vulnerability within the Attachments module . An attacker can execute arbitrary code by uploading a specially crafted XML file . A proof-of-concept exploit was published on Telegram in January 2026. While the impact is crit...
CVE-2025-53814
A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability...
EUVD-2018-13145
Malware in sbrugna...
EUVD-2018-1930
Malware in sbrugna...
EUVD-2016-5557
Malware in sbrugna...
EUVD-2018-20845
Malware in sbrugna...
EUVD-2023-46128
Malicious code in bioql PyPI...