9990 matches found
Microsoft Windows Remote Assistance - XML External Entity Injection
Microsoft Windows Remote Assistance - XML External Entity Injection Exploit Title: Microsoft Windows Remote Assistance XXE Date: 27/03/2018 Exploit Author: Nabeel Ahmed Tested on: Windows 7 x64, Windows 10 x64 CVE : CVE-2018-0878 Category: Remote Exploits Invitation.msrcincident...
Red Hat Spacewalk XML External Entity Injection Vulnerability
Red Hat Spacewalk is the United States Red Hat Red Hat, Inc. based on the Red Hat Network Satellite a set of system management platform and the development of open source Linux system management solutions. The solution provides statistical system information, install and update software, collect...
Microsoft Windows Remote Assistance - XML External Entity Injection
Exploit Title: Microsoft Windows Remote Assistance XXE Date: 27/03/2018 Exploit Author: Nabeel Ahmed Tested on: Windows 7 x64, Windows 10 x64 CVE : CVE-2018-0878 Category: Remote Exploits Invitation.msrcincident ------------------------ /xxe.xml" %remote;%root;%oob; xxe.xml ----------------------...
FreePlane XML External Entity Injection Vulnerability
FreePlane is a set of free open source mind mapping tools. mindmap loader is one of the mind map loader. XML Parser is one of the XML file parser. An XML external entity injection vulnerability exists in the XML Parser of the mindmap loader in FreePlane 1.5.9 and earlier versions. An attacker can...
Debian DLA-1316-1 : freeplane security update
Wojciech Regua discovered that Freeplane, a program for working with mind maps, was affected by a XML External Entity XXE vulnerability in its mindmap loader that could compromise a user's machine by opening a specially crafted mind map file. For Debian 7 'Wheezy', these problems have been fixed ...
IBM ConnectionsXML External Entity Injection Vulnerability
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An XML external entity...
Debian: Security Advisory (DLA-1299-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Server side request forgery (ssrf)
The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery SSRF attacks or possibly conduct XML External Entity XXE attacks and execute arbitrary code via a crafted serialized PHP object, related to the...
Xxe
XML external entity XXE vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a denial of service memory consumption via crafted XML data. IBM X-Force ID: 108357...
CVE-2014-3990
The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery SSRF attacks or possibly conduct XML External Entity XXE attacks and execute arbitrary code via a crafted serialized PHP object, related to the...
Microsoft Windows Remote Assistance XXE Injection Information Disclosure (CVE-2018-0878)
An XML external entity XXE injection vulnerability exist in the Remote Assistance component of Microsoft Windows. The vulnerability is due to a failure to properly handle external entity references in XML files. A remote attacker could exploit this vulnerability by enticing a target user into...
Microsoft Windows Remote Assistance XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Xxe
An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...
CVE-2018-6225
An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...
CVE-2018-6225
An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...
CVE-2018-6225
An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...
SAP Business Process Automation XML External Entity Vulnerability
SAP Business Process Automation BPA By Redwood is a suite of business process automation solutions from SAP, Germany. An XML external entity injection vulnerability exists in SAP BPA By Redwood, which arises from the program failing to adequately validate an XML document from an untrusted source...
I Librarian I-librarian XXE vulnerability
I Librarian I-librarian is an application for editing PDF files. An XXE vulnerability exists in line 154 of the importmetadata.php file in I Librarian I-librarian 4.8 and earlier versions. An attacker can exploit this vulnerability to read the contents of a file and perform a server-side request...
Xxe
SAP Business Process Automation BPA By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity XXE vulnerability...