54836 matches found
XStream-1
master: v-1.4.x: XStream Java zu XML Serialisierung, und zurück Binaries Alle binären Artefakte sind im -bin-Archiv gebündelt. Es enthält die XStream-JARs und alle anderen zur Build-Zeit verwendeten Bibliotheken, oder optionale Laufzeit-Erweiterungen. Xpp3 wird zur Verwendung empfohlen, da es die...
CVE-2023-46604
CVE-2023-46604 قم بإعداد docker-compose يحتوي على صورتين وهما جهاز الضحية والجهاز الهدف وفقًا للبيئة المطلوبة على جهاز الضحية، قم بتشغيل ActiveMQ انتقل إلى جهاز المهاجم: • قم بتشغيل خدمة HTTP لإرسال poc: python3 -m http.server • استخدم netcat للاستماع إلى الاتصال القادم إلى جهاز المهاجم nc -nlvp...
exploit-cve-2023-36808
CVE-2023-36808 - GLPI SQL-Injection ohne Authentifizierung Schwachstelle GLPI-Versionen wird ohne Bereinigung direkt in eine SQL-Abfrage eingefügt: root@kitploit: SELECT id FROM glpiagents WHERE deviceid = '' Es ist keine Authentifizierung erforderlich. Die Schwachstelle ermöglicht vollständigen...
CVE-2017-8056
CVE-2017-8056 CVE-2017-8056 XML-RPC Exploit DoS ⭐ PER LINUX : sudo apt-get update sudo apt-get install python3 sudp apt-get install python3-pip pip3 install colorama fakeuseragent pystyle 🧨 ESEGUI IL TOOL : python3 main.py ⭐ PER WINDOWS : Scarica e installa Python3 :...
xmlrpc-common-deserialization
xmlrpc-common Deserialisierungsschwachstelle Diese Notiz ist eine technische Notiz, die die Grundursache und den dazugehörigen Exploit im Detail beschreibt. Die ursprüngliche Offenlegung finden Sie hier. Die zugehörige CVE ist CVE-2019-17570. Beschreibung xmlrpc-common bildet eine gemeinsame...
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
CVE-2025-29775
Ambiente di Laboratorio SAMLStorm CVE-2025-29775 Questo è un ambiente di laboratorio per dimostrare la vulnerabilità SAMLStorm CVE-2025-29775 che colpisce la libreria xml-crypto e le implementazioni SAML in Node.js. Nota: non si tratta di un vero sfruttamento della vulnerabilità, ma di una...
CVE-2025-12748
CVE-2025-12748 Ita Rus Crediti: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Problemi: 687, 825 Italiano Descrizione È stato scoperto un problema nella procedura di elaborazione del file XML. L'elaborazione del contenuto del file viene eseguita prima del controllo ACL. Ciò consente a un...
CVE-2023-4357-Exploitation
CVE-2023-4357-Sfruttamento Progetto di Sicurezza di Rete Descrizione Validazione insufficiente dell'input non fidato in XML in Google Chrome precedente alla versione 116.0.5845.96 ha permesso a un attaccante remoto di bypassare le restrizioni di accesso ai file tramite una pagina HTML manipolata...
EXPLOIT-CVE-2026-8832-
EXPLOIT-CVE-2026-8832 Un tool di sfruttamento per testare le vulnerabilità di Esecuzione Remota di Codice RCE nel plugin WordPress WPCode Lite Insert Headers and Footers v2.3.5. Questa vulnerabilità deriva dalla registrazione del Tipo di Post Personalizzato CPT wpcode senza definire un...
CVE-2025-66034-htb-ctf
CVE-2025-66034-htb-ctf Exploit do Gerador de Fontes Variáveis VariaType Este repositório contém um exploit especializado para a máquina VariaType do Hack The Box. O exploit aproveita uma vulnerabilidade na forma como a biblioteca fontTools ou a aplicação web lida com arquivos XML .designspace e...
CVE-2024-34102
CVE-2024-34102 As versões 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 e anteriores do Adobe Commerce são afetadas por uma vulnerabilidade de Restrição Incorreta de Referência a Entidade Externa XML 'XXE' que pode resultar em execução de código arbitrária. Um atacante pode explorar esta vulnerabilidade...
evtx
EVTX Um analisador multiplataforma para o formato Windows XML EventLog Funcionalidades 🔒 Implementado usando 100% Rust seguro - e funciona em todas as plataformas suportadas pelo Rust que possuem stdlib. ⚡ Rápido - veja benchmarks abaixo. É mais rápido que qualquer outra implementação por ordens ...
CVE-2026-76956
A flaw was found in libexpat. This vulnerability arises from the software misinterpreting a return code, leading to insufficient randomness entropy for hash functions. A remote attacker could exploit this by sending specially crafted XML content, triggering hash flooding attacks. This can result ...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
CVE-2026-77658
A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...
Moderate: Red Hat Security Advisory: assertj-core security update
An update for assertj-core is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...