WSO2-2020-0731

WSO2-2020-0731: vulnerabilidades XXE y XSS en WSO2 Carbon Se han identificado potenciales XXE y XSS en múltiples productos WSO2. Divulgación del proveedor: La divulgación y el parche del proveedor para esta vulnerabilidad se pueden encontrar aquí. ¿Por qué no hay CVE? Ni yo ni el proveedor...

MAL-006

MAL-006: Entidad Externa XML en "Try It" en WSO2 ESB Se identificó un ataque de Entidad Externa XML XXE basado en errores en la herramienta "Try It" de WSO2 ESB. ¿Por qué no hay CVE? El proveedor respondió que "se recomienda deshabilitar Try It en producción" y no se realizó una divulgación...

fusionauth-samlv2

fusionauth-samlv2 This repository is SAML v2.0 bindings in Java using JAXB. You'd use this library to process SAML requests and responses. See the tests for example code. Security disclosures If you find a vulnerability or other security related bug, please report the vulnerability here before...

XXE-Payloads

XXE-Payloads Acceso rápido a los payloads XXE XXE: root@kitploit: %sp;...

CVE-2024-34102

CVE-2024-34102 ★ Gracias a @th3gokul, Sanjaith3hacker, Chocapikk por el código base original. ★ Descripción CVE-2024-34102 : Vulnerabilidad XXE en Adobe Commerce Descripción: Las versiones de Adobe Commerce 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 y anteriores están afectadas por una vulnerabilidad de...

CVE-2025-58360

CVE-2025-58360 在版本 2.26.0 至 2.26.2 之前以及 2.25.6 之前，发现了一个 XML 外部实体（XXE）漏洞。应用程序通过特定端点 /geoserver/wms 的 GetMap 操作接受 XML 输入。 利用1: root@kitploit: python3 CVE-2025-58360 -u http://example.com 利用2: root@kitploit: curl -X POST...

java-cve-2021-29425-tika-xxe

java-cve-2021-29425-tika-xxe...

Web-Security-Learning

Web-Security-Learning 项目地址： https://github.com/CHYbeta/Web-Security-Learning 知识星球【漏洞攻防】：https://t.zsxq.com/mm2zBeq 目录： Web-Security-Learning Web Security sql注入 MySql MSSQL PostgreSQL MongoDB 技巧 工具 XSS CSRF 其他前端安全 SSRF XXE JSONP注入 SSTI 代码执行 / 命令执行 文件包含 文件上传 / 解析漏洞 逻辑漏洞 未授权访问/信息泄露 redis RPOrelative...

resteasy-core: RESTeasy SourceProvider remote unauthenticated file read

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 存在于 ClamAV 的 DMG 文件解析器中的信息泄露漏洞 ClamAV 1.0.0 及更早版本、0.105.1 及更早版本以及 0.103.7 及更早版本中的 DMG 文件解析器存在一个漏洞，可能允许未经身份验证的远程攻击者访问受影响设备上的敏感信息。该漏洞是由于启用了 XML 实体替换，可能导致 XML 外部实体注入。攻击者可通过向受影响设备上的 ClamAV 提交特制的 DMG 文件进行扫描来利用此漏洞。成功利用后，攻击者可能泄露 ClamAV 扫描进程可读取的任何文件中的字节。 已在 Ubuntu 20.04 上测试...

xxexploiter

XXExploiter 它生成XML载荷，并自动启动一个服务器来提供所需的DTD或进行数据外泄。 安装 root@kitploit: install node and npm if you don't have it yet npm install -g xxexploiter 从源码构建和运行 这是一个用TypeScript编写的简单Node应用。因此你可以像构建其他应用一样构建它： （如果没有安装node和npm，请先安装它们） root@kitploit: npm install npm run build you may need to npm install typescrip...

XXEinjector

XXEinjector XXEinjector 自动化使用直接和带外方法检索文件。目录列表仅适用于 Java 应用程序。其他应用程序需要使用暴力破解方法。 Options: root@kitploit: --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file Mandatory - file containing valid HTTP request with xml. You can also mark with "XXEINJECT" a point where DTD...

CVE-2026-82918

Keyence XG VisionTerminal and XG-X VisionTerminal contain an XXE (XML External Entity) flaw: they improperly restrict XML external entity references. When a user opens a specially crafted setting file , sensitive information stored on the host system may be disclosed. The attack is local , requir...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414 概念验证 在 pki-core 中发现了一个缺陷。解析 XML 文档时访问外部实体可能导致 XML 外部实体（XXE）攻击。此缺陷允许远程攻击者通过发送特制的 HTTP 请求潜在地检索任意文件的内容。 参考资料： https://nvd.nist.gov/vuln/detail/CVE-2022-2414 https://access.redhat.com/security/cve/CVE-2022-2414...

CVE-2019-2888

CVE-2019-2888 WebLogic EJBTaglibDescriptor XXE漏洞 https://www.oracle.com/security-alerts/cpuoct2019.html fernflower.jar weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class root@kitploit: ╭─root@jas502n /var ╰─ find ./ |grep EJBTaglibDescriptor  ✔  8388  18:32:43...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...

Journyx - XML External Entities Injection (XXE)

The "soapcgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. id: CVE-2024-6893 info: name: Journyx - XML...

Apache Struts XWork - XML External Entity Injection

Apache Struts 2.0.0 2.2.1 and 2.2.1 = versions = 6.1.0 contain an XML external entity injection caused by missing XML validation, letting attackers potentially disclose files or cause denial of service, exploit requires crafted XML input id: CVE-2025-68493 info: name: Apache Struts XWork - XML...

Episerver 7 - Blind XML External Entity Injection

Episerver 7 patch 4 and earlier contains an XML external entity XXE caused by processing crafted DTD in XML requests involving util/xmlrpc/Handler.ashx, letting remote attackers read arbitrary files, exploit requires sending malicious XML payloads. id: CVE-2017-17762 info: name: Episerver 7 - Bli...

VMWare Cloud Foundation NSX-V - XML External Entity (XXE)

VMware Cloud Foundation NSX-V contains an XML External Entity XXE vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure. id: CVE-2022-31678 info: name: VMWare Cloud...