CVE-2023-45612-PoC

CVE-2023-45612 PoC Este repositorio contiene una prueba de concepto PoC para CVE-2023-45612, que permitía XXE en la configuración predeterminada de ContentNegotiation en ktor. El PoC se divide en 2 partes: server/, que contiene un ejemplo de un servidor Ktor que utiliza una versión afectada de...

CVE-2019-12401

CVE-2019-12401: Apache Solr 中的 XML 炸弹 5.0.0 之前的 Solr 版本容易受到通过其更新处理器的 XML 资源消耗攻击（即 Lol 炸弹）的影响。 通过利用 XML DOCTYPE 和 ENTITY 类型元素，攻击者可以创建一个模式，当服务器解析 XML 时该模式会扩展，导致内存溢出 OOM。 供应商披露： 供应商对该漏洞的披露和修复可以在此处找到。 概念验证： 更多细节和利用过程可以在这个PDF中找到。...

citrix_dir_traversal_rce

citrixdirtraversalrce Se descubrió un salto de directorio en Citrix Application Delivery Controller ADC, también conocido como NetScaler, y en Gateway 10.5, 11.1, 12.0, 12.1 y 13.0. Cuando NSPPE recibe una solicitud para GET /vpn/index.html, se supone que debe enviar esta solicitud a Apache, que ...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

The Import XML and RSS Feeds WordPress plugin before 2.1.5 allows unauthenticated attackers to execute arbitrary commands via a web shell. id: CVE-2023-4521 info: name: Import XML and RSS Feeds 2.1.5 - Unauthenticated RCE author: princechaddha severity: critical description: The Import XML and RS...

Zimbra Collaboration Suite - SSRF

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. id: CVE-2019-9621 info: name: Zimbra Collaboration Suite - SSRF author: riteshs4hu severity: high description: |...

Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass

Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x are vulnerable to authentication bypass. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the...

[SECURITY] Fedora 45 Update: xgrep-0.08-37.fc45

XGrep provides facilities for searching content in XML files. The search is specified either as an XPath via the -x flag, or a custom syntax including extended regular expressions via the -s flag...

[SECURITY] Fedora 45 Update: R-XML-3.99.0.23-3.fc45

Many approaches for both reading and creating XML and HTML documents including DTDs, both local and accessible via HTTP or FTP. Also offers access to an XPath "interpreter"...

[SECURITY] Fedora 45 Update: php-pecl-xmlrpc-1.0.0~rc3-20.fc45

This extension provides functions to write XML-RPC servers and clients. You can find more information about XML-RPC at http://www.xmlrpc.com/, and more documentation on this extension and its functions at https://www.php.net/xmlrpc. The extension is unbundled from php-src as of PHP 8.0.0, because...

[SECURITY] Fedora 45 Update: perl-XML-LibXML-2.0213-4.fc45

This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation...

[SECURITY] Fedora 45 Update: perl-XML-LibXML-Devel-SetLineNumber-0.002-35.fc45

If you are, say, writing a parser for a non-XML format that happens to have an XML-like data model, then you might wish to parse your format into an XML::LibXML document with elements, attributes and so on. And you might want all those nodes to return the correct line numbers when the "linenumber...

[SECURITY] Fedora 45 Update: perl-RDF-Trine-Node-Literal-XML-0.16-23.fc45

This Perl module encapsulates XML literals into RDF objects...

[SECURITY] Fedora 45 Update: libxml2-2.15.4-1.fc45

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

[SECURITY] Fedora 45 Update: GAPDoc-1.6.10-4.fc45

This package describes a document format for writing GAP documentation. The idea is to define a sufficiently abstract markup language for GAP documentation which can be relatively easily converted into different output formats. We used XML to define such a language. This package provides: -...

[SECURITY] Fedora 45 Update: docbook-dtds-1.0-93.fc45

The DocBook Document Type Definition DTD describes the syntax of technical documentation texts articles, books and manual pages. This syntax is XML-compliant and is developed by the OASIS consortium. This package contains SGML and XML versions of the DocBook DTD...

CVE-2024-41817-poc

ImageMagick 任意代码执行漏洞 CVE-2024-41817 针对 ImageMagick 版本 = 9.4.0 Python 包： paramiko 安装 git clone https://github.com/Dxsk/CVE-2024-41817-poc/ cd CVE-2024-41817-poc pip install -r requirements.txt 用法 自动检测易受攻击版本： python3 exploit.py -H -p -u -P -d 仅构建载荷： python3 exploit.py -c "command" -B 全自动模式（检测、构建并部署...

external_lib_AOSP10_r33_CVE-2021-45960_CVE-2021-46143-

Expat, Versión 2.2.6 Esto es Expat, una biblioteca en C para analizar XML, iniciada por James Clark en 1997. Expat es un analizador XML orientado a flujos. Esto significa que registras manejadores en el analizador antes de comenzar el análisis. Estos manejadores se invocan cuando el analizador...

exploit-cve-2023-36808

CVE-2023-36808 - Inyección SQL no autenticada en GLPI Vulnerabilidad Las versiones de GLPI se inyecta directamente en una consulta SQL sin sanitización: SELECT id FROM glpiagents WHERE deviceid = '' No se requiere autenticación. La vulnerabilidad permite acceso de lectura completo a la base de...

mirth-connect-security-poc

PoCs de vulnerabilidades de NextGen Connect 4.5.2 Exploits de prueba de concepto funcionales para tres vulnerabilidades alcanzables por red en NextGen Connect Mirth Connect 4.5.2. Los arneses ejecutan la imagen de contenedor oficial, crean únicamente la configuración de canal necesaria para el...