2167 matches found
UBUNTU-CVE-2020-8597
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...
[SECURITY] Fedora 30 Update: xar-1.8.0.417.1-1.fc30
The XAR project aims to provide an easily extensible archive format. Import ant design decisions include an easily extensible XML table of contents for ran dom access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the abili...
PPP Buffer Overflow Vulnerability
PPP is a data link protocol that establishes a direct point-to-point connection. A buffer overflow vulnerability exists in the 'eaprequest' and 'eapresponse ' functions in PPP versions 2.4.2 through 2.4.8. The vulnerability stems from a network system or product performing operations in memory...
PT-2020-1777
Name of the Vulnerable Software and Affected Versions ppp versions 2.4.2 through 2.4.8 Description The issue is related to buffer overflow errors in the eap request and eap response functions of the pppd daemon in the Point-to-Point Protocol PPP. Exploitation of this issue may allow a remote...
The vulnerability of the XML Parsing component in the Easy XML Editor allows a hacker to cause a service failure in the application or to read arbitrary files from the system.
The vulnerability of the XML Parsing component in the Easy XML Editor is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to cause service failures in the application or enable them to read arbitrary files in the system by running a specially craft...
PYSEC-2020-231
Feedgen python feedgen before 0.9.0 is susceptible to XML Denial of Service attacks. The feedgen library allows supplying XML as content for some of the available fields. This XML will be parsed and integrated into the existing XML tree. During this process, feedgen is vulnerable to XML Denial of...
[SECURITY] Fedora 31 Update: xar-1.6.1-1.fc31
The XAR project aims to provide an easily extensible archive format. Import ant design decisions include an easily extensible XML table of contents for ran dom access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the abili...
ezXML Heap Buffer Over Read Vulnerability
ezXML is a C library for parsing XML documents . A heap buffer over-read vulnerability exists in ezXML. The vulnerability stems from the ezxmldecode function performing incorrect memory handling when parsing specially crafted XML files. An attacker could exploit this vulnerability to cause a deni...
ezXML Stack Overflow Vulnerability
ezXML is a C library for parsing XML documents . A stack overflow vulnerability exists in ezXML. The vulnerability stems from the ezxmlentok function not handling recursion correctly. An attacker could exploit this vulnerability via a specially crafted XML file to cause a denial of service...
ezXML Null Pointer Dereference Vulnerability
ezXML is a C library for parsing XML documents . A null pointer dereference vulnerability exists in ezXML. The vulnerability stems from the ezxmldecode function performing incorrect memory handling when parsing specially crafted XML files. An attacker could exploit this vulnerability to cause a...
The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform allows a hacker to gain unauthorized access to protected information.
The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...
The vulnerability of Netweaver Application Server Java web applications lies in insufficient validation of requests on the server side, allowing attackers to expose privileged user credentials.
The vulnerability of Netweaver Application Server Java web applications is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to obtain privileged user credentials by using a specially created XML file...
XML Entity Injection Vulnerability in Apache Commons-digester Component
Apache is web server software.Commons-digester is Apache is a component that converts XML into JAVA beans. An XML entity injection vulnerability exists in the Apache Commons-digester component. By constructing malicious content, an attacker can cause arbitrary files to be read and system commands...
POC-T
This is a Python-based penetration testing framework called POC-T. It is a concurrent framework that allows users to perform various types of attacks, including vulnerability verification, file upload, weak password cracking, and more. The framework has a modular design, with each module...
The vulnerability of the Enterprise Resource Management System “Galaktika ERP” allows a hacker to initiate requests for resources on behalf of the server.
The vulnerability of the .res components of the Enterprise Resource Management System “Galaktika ERP” is related to the functionality of importing XML configurations. Exploiting this vulnerability allows a malicious actor to initiate requests to any resource on behalf of the server by performing...
jackson-mapper-asl XML External Entity Vulnerability
jackson-mapper-asl is a data mapping package built on the Jackson JSON processor. An XML external entity vulnerability exists in version 1.9.x of jackson-mapper-asl. No detailed vulnerability details are provided at this time...
Jaeles - The Swiss Army Knife For Automated Web Application Testing
Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner. Installation go get -u github.com/jaeles-project/jaeles Please visit the Official Documention for more details. Checkout Signature Repo for base signature. Usage More usage...
XML Entity Injection Vulnerability in Panmicro E-cology
Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...
CVE-2019-16284
A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFIBOOTSERVICES structure might be overwritten by an attacker to execute arbitrary SM...
