xxexploiter

XXExploiter It generates the XML payloads, and automatically starts a server to serve the needed DTD's or to do data exfiltration. Installation install node and npm if you don't have it yet npm install -g xxexploiter Building & Running from source This is a simple Node application written with...

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...

Grassmarlin-CVE-2026-6807-XXE-POC

This is functional proof of concept code based on the CISA disclosure of a reported vulnerability in Grassmarlin posted on 4/28/2026. Looking at the code for Grassmarlin, I determined that the likely vulnerable parameters had to do with the XML files ingested when opening stored sessions. By...

xerces-3.2.3-DTD-hotfix

This repository does not have a README...

CVE-2021-29447-POC

CVE-2021-29447-POC About This script automates the required steps to exploit CVE-2021-29447 in the media upload funnctionality in Wordpress and use it to extract files vi an XXE. Usage ./generatepayloads.py --help usage: generatepayloads.py -h --local-ip LOCALIP --local-port LOCALPORT...

CVE-2026-126062

A flaw was found in Nokogiri. When running on JRuby, the library fails to properly enforce network restrictions during the resolution of external Document Type Definitions DTDs or entities. A remote attacker can exploit this issue by supplying a crafted XML document containing short-form network...

JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 host

Summary On JRuby, the NONET parse option did not block an external DTD or entity whose system identifier used a short-form IPv4 host, such as http://127.1/ or http://169.254.43518/, or was an absolute path such as /x.dtd in a document parsed from a network URL. An application that parses untruste...

CVE-2026-119724

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

EUVD-2026-115730

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

CVE-2026-119724

A flaw in Apache JClouds (all versions) allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML document. The root cause is the improper restriction of recursive entity references within Document Type Definitions (DTDs), which can lead to excessive consum...

CVE-2026-119724: Apache Software Foundation Apache JClouds: ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')…

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

PT-2026-136064

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

CVE-2026-93570: Krajowa Izba Rozliczeniowa: Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection

Szafir and Szafir Weryfikująca are vulnerable to XML External Entity XXE injection. When a user signs or verify a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's filesystem...

CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-91858

The camel-fop component in Apache Camel is vulnerable to XML External Entity (XXE) injection when a third-party JAXP TransformerFactory (such as Saxon-HE ) is present on the classpath. The FopProducer uses TransformerFactory.newInstance() and only enables FEATURE_SECURE_PROCESSING. While this pro...

CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

Astra Linux – vulnerability in expat

Libexpat versions prior to 2.7.5 allow an infinite loop while parsing DTD content...

Wazuh improper recursive links DoS

The vulnerability of the Wazuh security monitoring and threat detection platform is related to improper restrictions on recursive references to entities in the DTD. Exploiting this vulnerability could allow a malicious actor to cause service failures...