1043 matches found
xcat
XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...
tinyxml
/ @mainpage TinyXML TinyXML 是一个简单、小巧的 C++ XML 解析器，可以轻松集成到其他程序中。 它能做什么。 简而言之，TinyXML 解析 XML 文档，并从中构建一个文档对象模型（DOM），该模型可以被读取、修改和保存。 XML 代表“可扩展标记语言”。它允许你创建自己的文档标记。HTML 在为浏览器标记文档方面做得非常好，而 XML 允许你定义任何类型的文档标记，例如描述一个用于日程管理应用程序的“待办事项”列表的文档。XML 是一种非常结构化且方便的格式。所有那些用于存储应用程序数据的随机文件格式都可以被 XML 取代。一个解析器适用于所有。...
CentOS Linux 8.5 [TuxCare] Security Update: expat / expat-devel / expat-static (CENTOS8.5:CLSA-2026:1780592184)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780592184 advisory. - libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. CVE-2026-41080 Note that Ness...
AlmaLinux 9.2 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.2:CLSA-2026:1780707176)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780707176 advisory. - libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. CVE-2026-41080 Note that Ness...
Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.6:CLSA-2026:1780579806)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780579806 advisory. - libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. CVE-2026-41080 Note that...
CVE-2024-34102
Cosmic Sting: Explotador de CVE-2024-34102 Cosmic Sting es una herramienta basada en Go diseñada para explotar CVE-2024-34102, una vulnerabilidad de ejecución remota de código. Detalle de CVE-2024-34102 Las versiones de Adobe Commerce 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 y anteriores se ven...
SUSE CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
DEBIAN-CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
UBUNTU-CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253 Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253 Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253: Uncontrolled Recursion
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
Linux Distros Unpatched Vulnerability : CVE-2026-78253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion...
EUVD-2026-78901
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to...
CVE-2026-11864
IBM Cloud Pak for Business Automation versions 26.0.0 through 26.0.0 IF 001, 25.0.0 through 25.0.0 IF 005, 24.0.1 through 24.0.1 IF 008, and 24.0.0 through 24.0.0 IF 009 are affected by an XPath injection vulnerability. An authenticated attacker can use it to exfiltrate sensitive application data...
PT-2026-92141
Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation versions 26.0.0 through 26.0.0 Interim Fix 001 IBM Cloud Pak for Business Automation versions 25.0.0 through 25.0.0 Interim Fix 005 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1...
The vulnerability of the Document.createElement() function in the XML document access and manipulation module XMLDOM allows attackers to bypass existing security mechanisms and perform cross-site scripting (XSS) attacks.
The vulnerability of the Document.createElement function in the XML document access and management module, XMLDOM, is related to errors in processing XML requests. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and perform cross-site scripting attacks XSS...
CVE-2026-84651
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure...
AZL-103529 CVE-2026-75140 affecting package jsoup 1.11.3-4
jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...