EUVD-2019-10745

Malware in sbrugna...

Syncro Soft Oxygen XML Editor Arbitrary File Read Vulnerability

Syncro Soft Oxygen XML Editor is an XML editor from Syncro Soft Romania. A security vulnerability exists in Oxygen XML Editor version 21.1.1. An attacker can exploit the vulnerability to read arbitrary files...

CVE-2019-20191

Oxygen XML Editor 21.1.1 allows XXE to read any file...

CVE-2019-20191

Oxygen XML Editor 21.1.1 allows XXE to read any file...

Design/Logic Flaw

Oxygen XML Editor 21.1.1 allows XXE to read any file...

CVE-2019-20191

Oxygen XML Editor 21.1.1 allows XXE to read any file...

CVE-2019-20191

Oxygen XML Editor 21.1.1 is affected by an XML External Entity (XXE) vulnerability that can be leveraged to read arbitrary files. The CVE entry CVE-2019-20191 is corroborated by multiple sources (NVD, CNVD, CVE list), describing an XXE issue with partial confidentiality impact. No remediation det...

PT-2020-10366

Name of the Vulnerable Software and Affected Versions Oxygen XML Editor version 21.1.1 Description The issue allows XXE XML External Entity attacks, enabling an attacker to read any file. Recommendations For Oxygen XML Editor version 21.1.1, update to a version that fixes this issue to prevent XX...

CVE-2019-20191: Improper Restriction of XML External Entity Reference

Oxygen XML Editor 21.1.1 allows XXE to read any file...

oXygen XML Editor 21.1.1 XML Injection

Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection Author: Pablo Santiago Date: 2019-11-13 Vendor Homepage: https://www.oxygenxml.com/ Source:https://www.oxygenxml.com/xmleditor/downloadoxygenxmleditor.html Version: 21.1.1 CVE : N/A Tested on: Windows 7 PoC 1- python -m...

oXygen XML Editor 21.1.1 - XML External Entity Injection

oXygen XML Editor 21.1.1 - XML External Entity Injection Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection Author: Pablo Santiago Date: 2019-11-13 Vendor Homepage: https://www.oxygenxml.com/ Source:https://www.oxygenxml.com/xmleditor/downloadoxygenxmleditor.html Version:...

oXygen XML Editor 21.1.1 - XML External Entity Injection

Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection Author: Pablo Santiago Date: 2019-11-13 Vendor Homepage: https://www.oxygenxml.com/ Source:https://www.oxygenxml.com/xmleditor/downloadoxygenxmleditor.html Version: 21.1.1 CVE : N/A Tested on: Windows 7 PoC 1- python -m...