CVE-2017-8759_-SOAP_WSDL

Qu'est-ce que CVE-2017-8759 est une vulnérabilité d'exécution de code à distance sur SOAP WDSL Une vulnérabilité d'exécution de code à distance existe lorsque Microsoft .NET Framework traite des entrées non fiables. Un attaquant qui exploite avec succès cette vulnérabilité dans un logiciel...

CVE-2018-20580

CVE-2018-20580 Une preuve de concept pour ReadyAPI 2.5.0/2.6.0 Exécution de code à distance avec interactions. Introduction En décembre 2018, j'ai découvert une nouvelle vulnérabilité dans ReadyAPI. Elle permet à un attaquant d'exécuter du code à distance sur la machine locale, mettant en danger...

CVE-2017-8759-Exploit-sample

CVE-2017-8759-Exploit-sample Exécution de l'exemple d'exploitation CVE-2017-8759. Déroulement de l'exploit : Une macro Word s'exécute dans le fichier Doc1.doc. La macro télécharge un fichier txt mal formaté via wsdl, ce qui déclenche le journal d'analyse WSDL. Ensuite, le journal d'analyse entraî...

WS-Attacker

WS-Attacker WS-Attacker est un framework modulaire pour les tests d'intrusion de services web. Il est développé par la Chaire de sécurité des réseaux et des données de l'Université de la Ruhr à Bochum https://nds.rub.de/ et par Hackmanit GmbH https://hackmanit.de/. L'idée fondamentale derrière...

DEBIAN-CVE-2026-91765

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

CVE-2026-91765

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

CVE-2026-91765

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

CVE-2026-91765

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

CLEANSTART-2026-DL82237 Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities

Security vulnerability affects the wildfly package. Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by an XML External Entity Injection vulnerability due to Apache CXF (CVE-2026-65432)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty with jaxws-2.2, xmlWS-3.0, xmlWS-4.0, wsSecurity-1.1 or wsAtomicTransaction-1.2 enabled. Vulnerability Details CVEID:CVE-2026-65432 DESCRIPTION: Apache CXF reads a top-level WSDL throu...

EUVD-2026-75783

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits ...

CVE-2026-81207

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits ...

PT-2026-89626

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An authenticated tenant, regardless of project membership or role, can fully control the scheme, host, port, and path of an outbound fetch originating from a shared-infrastructure...

Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation

A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document containing attacker-controlled import...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection in the WSDL/XSD import process. An attacker can access sensitive files or internal resources by supplying crafted XML documents containing external entity references, which are processed when imported...

CVE-2026-65432

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any or referenced from that top-level WSDL is handed off to WSDL4J, which does not disable DOCTYPE declarations or external entities. As a result, the protections applied...

CVE-2026-65432 Apache CXF: XXE via WSDL/XSD import parsing

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any or referenced from that top-level WSDL is handed off to WSDL4J, which does not disable DOCTYPE declarations or external entities. As a result, the protections applied...

CVE-2026-65432

The Apache CXF library is vulnerable to XML External Entity (XXE) attacks because it fails to extend protections to imported content. While Apache CXF uses a hardened StaxUtils path to disable DTDs and external entities for top-level WSDLs, any or references are passed to WSDL4J . Unlike CXF, W...

CVE-2026-65432 Apache CXF: XXE via WSDL/XSD import parsing

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any or referenced from that top-level WSDL is handed off to WSDL4J, which does not disable DOCTYPE declarations or external entities. As a result, the protections applied...

CVE-2026-65432: Improper Restriction of XML External Entity Reference

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any or referenced from that top-level WSDL is handed off to WSDL4J, which does not disable DOCTYPE declarations or external entities. As a result, the protections applied...