CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

DEBIAN-CVE-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...

CVE-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...

CVE-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...

CVE-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...

CVE-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...

CVE-2019-14276

WUSTL XNAT 1.7.5.3 allows XXE attacks via a POST request body...

PT-2019-13578 · Wustl · Xnat

Name of the Vulnerable Software and Affected Versions: WUSTL XNAT version 1.7.5.3 Description: The issue allows XXE attacks via a POST request body. Recommendations: For version 1.7.5.3, update to a newer version that contains a fix for this issue...

Apache POI CVE-2019-12415 XML External Entity Information Disclosure Vulnerability

Description Apache POI is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Apache POI version 4.1.0 and prior are vulnerable. Technologies Affected Apache POI 0.1 Apache POI 0.10.0 Apache...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

Awesome Web Security 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of...

XML External Entity

Overview Affected versions of this package are vulnerable to XML External Entity. The XmlScanner decodes the sheet1.xml from an .xlsx to UTF-8 if something else than UTF-8 is declared in the header. This was a security measurement to prevent CVE-2018-19277 but the fix is not sufficient. By...

Dell RSA Authentication Manager XML External Entity Injection Vulnerability

Dell RSA Authentication Manager is a centralized suite of binary authentication software from Dell, Inc. The software centralizes the management of binary identities, security tokens, methods and users across physical sites. An XML external entity injection vulnerability exists in Dell RSA...

winrar 5.80 - XML External Entity Injection Exploit

Exploit Title: winrar 5.80 - XML External Entity Injection Exploit Author: albalawi Vendor Homepage: https://win-rar.com/fileadmin/winrar-versions/winrar-x64-58b2.exe Version: 5.80 Tested on: Microsoft Windows Version 10.0.18362.418 64bit POC 1- python -m SimpleHTTPServer listens Port 8000 2- ope...

WinRAR 5.80 XML Injection

Exploit Title: winrar External Entity Injection Exploit Author: albalawi-s Vendor Homepage: https://win-rar.com Software Link: https://win-rar.com/fileadmin/winrar-versions/winrar-x64-58b2.exe Version: 5.80 Tested on: Microsoft Windows Version 10.0.18362.418 64bit https://twitter.com/testapp poc...

XML External Entity (XXE)

Raml parser is vulnerable to XML external entity attacks. The attack is possible because an XML input containing a reference to an external entity is not blocked by the XML parser, allowing an attacker to inject malicious XML files to retrieve system files or perform requests on behalf of the...

Dell EMC RSA Authentication Manager XML External Entity Information Disclosure Vulnerability

Description Dell EMC RSA Authentication Manager is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Dell RSA Authentication Manager version 8.4 P6 and prior are vulnerable. Technologies...

Adobe Experience Manager XML External Entity Injection Vulnerability (CNVD-2019-37123)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An XML external entity injection vulnerability exists in Adobe Experience Manager 6.2, 6.3, 6.4, and 6.5. An attacker can exploit this vulnerabilit...

Adobe Experience Manager XML External Entity Injection Vulnerability (CNVD-2019-37124)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An XML external entity injection vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, 6.5. An attacker can exploit this...

Adobe Experience Manager XML External Entity Injection Vulnerability (CNVD-2019-37122)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An XML external entity injection vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, 6.5. An attacker can exploit this...

The vulnerability of the libexpat library for analyzing XML files stems from an incorrect limitation on XML references to external objects, which allows a hacker to trigger a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially created XML file...