tinyxml

/ @mainpage TinyXML TinyXML هو محلّل XML بسيط وصغير مكتوب بلغة C++ ويمكن دمجه بسهولة في البرامج الأخرى. ما الذي يفعله؟ باختصار، يقوم TinyXML بتحليل مستند XML ويبني منه نموذج كائن المستند DOM الذي يمكن قراءته وتعديله وحفظه. XML تعني "لغة الترميز القابلة للامتداد". تتيح لك إنشاء ترميزات المستندات...

CVE-2017-15950

CVE-2017-15950 CVE-2017-15950 भेद्यता के लिए PoC शोषण: SyncBreeze XML Parser और/या Sync कार्यक्षमता में स्टैक-आधारित बफर ओवरफ्लो। उपयोग XML पेलोड जनरेटर चलाने पर, स्क्रिप्ट एक XML फ़ाइल xplSyncBreeze.xml आउटपुट करेगी जिसमें SyncBreeze का उपयोग करके आयात करने के लिए पेलोड होगा। root@kitploit:...

ktor-cve-2023-45612-poc

إثبات مفهوم ثغرة XXE في Ktor CVE-2023-45612 ملخص التأثير: الوصول إلى ملفات عشوائية عبر DTD XML مُصمم مع مرجع XXE. السبب الجذري: محلل مستندات XML غير آمن. يحتوي هذا المستودع على تطبيق Ktor 2.3.4 ضعيف مُهيأ للسماح بالكيانات الخارجية بحيث يكون تأثير XXE مرئيًا. الوصف تطبيق Ktor ضعيف الإصدار 2.3.4...

external_expat_2.1.0_CVE-2022-43680

Expat، الإصدار 2.1.0 هذه هي مكتبة Expat، وهي مكتبة بلغة C لتحليل XML، كتبها جيمس كلارك. Expat هو محلل XML موجه للتيار. وهذا يعني أنك تسجل معالجات مع المحلل قبل بدء التحليل. يتم استدعاء هذه المعالجات عندما يكتشف المحلل الهياكل المرتبطة في المستند الذي يتم تحليله. علامة البداية مثال على نوع الهياكل...

CVE-2026-83611

A flaw was found in xmldom, a JavaScript XML DOM parser. The DOMParser.parseFromString function can silently accept malformed XML end tags that include a line break and additional content. This unexpected parsing behavior causes the parser to close the element prematurely and discard the trailing...

CVE-2026-83606

A flaw was found in xmldom, a JavaScript XML DOM parser. This vulnerability, a Regular Expression Denial of Service ReDoS, occurs due to inefficient processing of unterminated processing instructions in XML input. A remote, unauthenticated attacker can send a specially crafted XML input, causing...

CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global expression / \t\n\r+$/g. For an end tag containing a long whitespace run...

CVE-2026-83615 xmldom: Quadratic-memory consumption

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses copy to clone the complete currentNSMap for each nested element...

CVE-2026-83614

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.3.0 through 0.6.0, two independent quadratic paths can cause denial of service. In lib/sax.js, parseElementStartPart...

CVE-2026-83611

xmldom (and @xmldom/xmldom ) is a pure JavaScript XML DOM parser. The vulnerability lies in DOMParser.parseFromString() , which can silently accept a malformed end tag where the tag name is followed by a line break and trailing content (e.g., ), closing the element and discarding the trailing con...

EUVD-2026-69225

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString can silently accept an end tag such as , close the element, and discard th...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Improper Input Validation.

Summary fast-xml-parser is used by IBM Storage Fusion Data Foundation, which could cause Improper Input Validation. CVE-2026-25896. Vulnerability Details CVEID:CVE-2026-25896 DESCRIPTION: fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C...

RHSA-2026:61247 Red Hat Security Advisory: libxml2 security update

Bulletin has no description...

zk-xml-probe

zk-xml-probe Statische XML-Fixtures für autorisierte Bug-Bounty-Tests des XML-Parser-Verhaltens CVE-2026-45071...

Linux Distros Unpatched Vulnerability : CVE-2026-80185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser...

CVE-2026-13401

A flaw was found in perl-XML-Bare. A remote attacker can exploit this vulnerability by providing specially crafted XML input with malformed attributes. This can cause the parsercparse function to enter an infinite loop, leading to a Denial of Service DoS condition where the application becomes...

Astra Linux – Vulnerability in libxml-parser-perl

XML::Parser versions up to 2.47 for Perl have a heap buffer overflow issue in stserialstack. In the case where stackptr == stacksize - 1, the stack will NOT be expanded. As a result, the new value will be written at location ++stackptr, which equals stacksize. This means that the new value falls...

Astra Linux – Vulnerability in OpenCV

A issue was discovered in OpenCV prior to version 4.1.1. There is a NULL pointer dereferencing in the function cv::XMLParser::parse, located in modules/core/src/persistence.cpp...

ROOT-OS-DEBIAN-11-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root

Root has patched CVE-2026-56409 in the expat package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-76641

Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...