Microsoft Windows Remote Assistance - XML External Entity Injection

Microsoft Windows Remote Assistance - XML External Entity Injection Exploit Title: Microsoft Windows Remote Assistance XXE Date: 27/03/2018 Exploit Author: Nabeel Ahmed Tested on: Windows 7 x64, Windows 10 x64 CVE : CVE-2018-0878 Category: Remote Exploits Invitation.msrcincident...

FreePlane XML External Entity Injection Vulnerability

FreePlane is a set of free open source mind mapping tools. mindmap loader is one of the mind map loader. XML Parser is one of the XML file parser. An XML external entity injection vulnerability exists in the XML Parser of the mindmap loader in FreePlane 1.5.9 and earlier versions. An attacker can...

Debian DLA-1316-1 : freeplane security update

Wojciech Regua discovered that Freeplane, a program for working with mind maps, was affected by a XML External Entity XXE vulnerability in its mindmap loader that could compromise a user's machine by opening a specially crafted mind map file. For Debian 7 'Wheezy', these problems have been fixed ...

Debian: Security Advisory (DLA-1299-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Server side request forgery (ssrf)

The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery SSRF attacks or possibly conduct XML External Entity XXE attacks and execute arbitrary code via a crafted serialized PHP object, related to the...

Xxe

XML external entity XXE vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a denial of service memory consumption via crafted XML data. IBM X-Force ID: 108357...

CVE-2014-3990

The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery SSRF attacks or possibly conduct XML External Entity XXE attacks and execute arbitrary code via a crafted serialized PHP object, related to the...

Windows Remote Assistance Exploit Lets Hackers Steal Sensitive Files

You have always been warned not to share remote access to your computer with untrusted people for any reason—it's a basic cybersecurity advice, and common sense, right? But what if, I say you should not even trust anyone who invites or offer you full remote access to their computers. A critical...

Xxe

An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...

CVE-2018-6225

An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...

CVE-2018-6225

An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...

CVE-2018-6225

An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...

Microsoft Windows Remote Assistance Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. Microsoft Windows Remote Assistance does not properly handle XML external entities and is implemented with an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

SAP Business Process Automation XML External Entity Vulnerability

SAP Business Process Automation BPA By Redwood is a suite of business process automation solutions from SAP, Germany. An XML external entity injection vulnerability exists in SAP BPA By Redwood, which arises from the program failing to adequately validate an XML document from an untrusted source...

I Librarian I-librarian XXE vulnerability

I Librarian I-librarian is an application for editing PDF files. An XXE vulnerability exists in line 154 of the importmetadata.php file in I Librarian I-librarian 4.8 and earlier versions. An attacker can exploit this vulnerability to read the contents of a file and perform a server-side request...

Xxe

SAP Business Process Automation BPA By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity XXE vulnerability...

CVE-2018-2401

SAP Business Process Automation BPA By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity XXE vulnerability...

CVE-2018-2401

SAP Business Process Automation BPA By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity XXE vulnerability...

Information disclosure

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how...

CVE-2018-0878

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how...