CVE-2023-46604

CVE-2023-46604 このリポジトリには、Apache ActiveMQ に影響する CVE-2023-46604 脆弱性向けのエクスプロイトスクリプトと Proof of Concept PoC XML ファイルが含まれています。この脆弱性は、OpenWire プロトコル内の安全でないデシリアライゼーションにより、リモートコード実行を可能にします。 Description CVE-2023-46604 は、Apache ActiveMQ の OpenWire プロトコルに存在するデシリアライゼーションの脆弱性です。この欠陥は、攻撃者が ActiveMQ...

CVE-2020-2555

EXP テスト...

Rocky Linux 8 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (crlsa-2026_69655)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669655 advisory. libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 fix...

CVE-2024-34102

Cosmic Sting: CVE-2024-34102 エクスプロイター Cosmic Sting は、CVE-2024-34102（リモートコード実行の脆弱性）を悪用するために設計された Go ベースのツールです。 CVE-2024-34102 詳細 Adobe Commerce バージョン 2.4.7、2.4.6-p5、2.4.5-p7、2.4.4-p8 およびそれ以前は、XML 外部エンティティ参照（'XXE'）の不適切な制限の脆弱性の影響を受け、任意のコード実行につながる可能性があります。攻撃者は、外部エンティティを参照する巧妙に細工された XML...

CVE-2025-27136

CVE-2025-27136 XML External Entity（XXE）脆弱性の悪用 XMLペイロードを使用して機密ファイルを取得する（PoC） test.xml curlを使用して、ローカルマシンからバケットに test.xml をアップロードします。 curl -X PUT http://127.0.0.1:PORT/TB1 -H "Content-Type: application/xml" -d @test.xml エクスプロイトをトリガーしてファイルを取得する curl http://127.0.0.1:PORT/TB1?location...

SUSE CVE-2026-78253

Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...

CVE-2026-78253 Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt

Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...

CVE-2026-78253 Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt

Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...

libxml2 security, bug fix, and enhancement update

An update is available for libxml2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...

RLSA-2026:69655 Moderate: libxml2 security, bug fix, and enhancement update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 fix Rocky Linux-11927...

MiracleLinux 8 : libxml2-2.9.7-21.el8_10.8 (AXSA:2026-1887:09)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1887:09 advisory. libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-78253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion...

RockyLinux 8 : libxml2 (RLSA-2026:69655)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69655 advisory. libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 f...

AlmaLinux 8 : libxml2 (ALSA-2026:69655)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69655 advisory. libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 fi...

libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the xmlParseInternalSubset function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service DoS, making the affected system or application...

Moderate: Red Hat Security Advisory: libxml2 security, bug fix, and enhancement update

An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2026:69655 Moderate: libxml2 security, bug fix, and enhancement update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 fix AlmaLinux-119279...

RHEL 8 : libxml2 (RHSA-2026:69655)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69655 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2: libxml2:...

Security Bulletin: IBM Tivoli Monitoring's libexpat library is affected by a security vulnerability.

Summary A vulnerable version of libexpat library which is included as part of IBM Tivoli Monitoring ITM have been remediated. Vulnerability Details CVEID:CVE-2026-41080 DESCRIPTION: libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document...

ROS-20260915-73-0041

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created XML file...