CVE-2021-47996

A flaw was found in Nokogiri, specifically within its bundled libxml2 library. A remote attacker could exploit multiple vulnerabilities, including memory leaks, buffer over-reads, heap-based buffer overflows, and out-of-bounds reads, by processing specially crafted XML documents. This could lead ...

CVE-2020-13965

CVE-2020-13965: Cross-Site Scripting über bösartigen XML-Anhang in Roundcube Webmail In Roundcube-Versionen vor 1.4.5 und 1.3.12 besteht eine Cross-Site-Scripting-Sicherheitslücke XSS. Durch Ausnutzung des Parsens von „text/xml“-Anhängen kann ein Angreifer den Roundcube-Skriptfilter umgehen und...

CVE-2019-14678

CVE-2019-14678: Entità Esterna XML in SAS XML Mapper La versione 9.45 di SAS XML Mapper presenta una vulnerabilità di tipo Entità Esterna XML XXE che può essere sfruttata da malintenzionati in molteplici modi. Alcuni esempi sono la lettura locale di file, l'esfiltrazione di file fuori banda, il...

CVE-2019-12401

CVE-2019-12401: Bomba XML in Apache Solr Le versioni di Solr precedenti alla 5.0.0 sono vulnerabili a un attacco di consumo di risorse XML noto anche come Lol Bomb tramite il suo update handler. Sfruttando gli elementi XML DOCTYPE e ENTITY, l'attaccante può creare un pattern che si espande quando...

CVE-2026-79772

A flaw was found in Nokogiri. This vulnerability occurs because the canonicalize method fails to properly check the return value from an internal XML processing function, returning an empty string on failure instead of an error. A remote attacker could exploit this by providing specially crafted...

CVE-2021-29447

CVE-2021-29447 PoC Questo repository contiene un exploit Proof of Concept PoC per la vulnerabilità CVE-2021-29447 , che interessa WordPress 5.6 e 5.7 utilizzando PHP 8. L'exploit dimostra come un attaccante, con la capacità di caricare file, possa sfruttare una vulnerabilità di parsing XML nella...

assertj-core security update

An update is available for assertj-core. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A rich and intuitive set of strongly-typed assertions to use for unit...

CVE-2026-42231

GHSA-q5f4-99jv-pgg5 — Pollution de prototype XML Webhook n8n → RCE CVE: CVE-2026-42231 Sévérité: Critique CVSS 10.0 Versions affectées: n8n . xml2js 0.6.2 utilise Object.defineProperty avec un descripteur de données pour définir les clés d'éléments sur les objets analysés. Comme est toujours ,...

CVE-2026-23980-Exploit

CVE-2026-23980 - Apache Superset Iniezione SQL Autenticata root@kitploit: / \ | | | | | || | \\ sqlExpression va direttamente alla query. nessuna parametrizzazione. nessuna speranza. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - colonna adhoc...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Quebrando a Cadeia de Atualizações: Dentro do CVE-2025-59287 e a Ameaça de RCE no WSUS O CVE-2025-59287 é uma vulnerabilidade crítica de RCE no Windows Server Update Services WSUS causada pela desserialização insegura de dados não confiáveis. Ela permite que atacantes remotos executem código...

CVE-2024-34102

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos o retorno seguro de todos os cidadãos que foram feitos reféns pelo grupo terrorista Hamas. Não descansaremos até que todos os reféns sejam libertados e retornem em segurança para casa. Você pode ajudar a trazê-los de...

CVE-2026-47891

A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3....

CVE-2025-60595

CVE-2025-60595 SPH Engineering UgCS 5.13.0 मनमाना कोड निष्पादन Arbitrary code execution के प्रति संवेदनशील है। यह CVE साइट पर उपयोग के लिए सार्वजनिक संदर्भ है। SPH Engineering के स्वामित्व वाले उत्पाद पर मनमाना कोड निष्पादन। UGCS 5.13.0! Ardupilot/mavparse.py की सीधी पंक्तियाँ, पंक्ति 230 "243: s...

CVE-2026-47891

This vulnerability affects Spring Framework WebFlux applications that use the Aalto XML processor to parse XML input. The Jaxb2Decoder does not correctly enforce the maxInMemorySize limit, allowing oversized XML payloads to bypass the intended size restriction. Affected versions span 5.2.25.RELEA...

CVE-2026-47891 Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder

A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3....

EUVD-2026-66859

A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3....

Evtx_Log_Browser

Navegador de Logs Evtx xml Navegue pelos logs de eventos do Windows evtx e exporte para xml A versão mais recente estáaqui Dependências: .NET Framework 4.8 Powershell Versão: 5.1...

xmlsec

XMLSec-Bibliothek Die XMLSec-Bibliothek bietet eine in C implementierte Unterstützung für die wichtigsten XML-Sicherheitsstandards: XML-Signatur-Syntax und -Verarbeitung XML-Verschlüsselungs-Syntax und -Verarbeitung Detaillierte Informationen über unterstützte Funktionen und Algorithmen finden Si...

xpath

xpath 用于授权安全测试的高级 XPath 注入扫描器。 由 Chokri Hammedi blue0x1 编写 · MIT 许可 概述 xpath 是一个使用 Nim 编写的快速、多技术 XPath 注入扫描器。它专注于实际检测、响应比较、可见提取、盲提取，以及针对真实世界 XML 支持应用的负载覆盖。 它除了 Nim 标准库外没有外部运行时依赖。 能力...

Poc-CVE-2024-32962-xml-crypto

Poc-CVE-2024-32962-xml-crypto Eine Simulation eines Angriffs, der die Schwachstelle CVE-2024-32962 ausnutzt, um SAML-Nachrichten zu fälschen und unbefugte Berechtigungen zu erlangen Sehr bald verfügbar. Poc...