wxpath

wxpath - declarative web graph traversal with XPath NEW: TUI - Interactive terminal interface powered by Textual for testing wxpath expressions and exporting data. Install Requires Python 3.10+. root@kitploit: pip install wxpath For TUI support: pip install "wxpathtui" Immediately launch the TUI...

CVE-2022-41852

Prueba de concepto de ejecución remota de código en la librería JXPath CVE-2022-41852 CVE-2022-41852 permite a los atacantes ejecutar código en el servidor de aplicaciones. Puedes leer más sobre esta vulnerabilidad aquí:...

CVE-2024-45409

Ruby-SAML / GitLab Authentication Bypass CVE-2024-45409 exploit This script exploits the CVE-2024-45409 that allows an unauthenticated attacker with access to any signed SAML document issued by the IDP to forge a SAML Response/Assertion and gain access as any user on GitLab. All the following...

xcat

XCat XCat es una herramienta de línea de comandos para explotar e investigar vulnerabilidades de inyección XPath ciega. Para una referencia completa, lee la documentación aquí: https://xcat.readthedocs.io/en/latest/ Soporta una gran cantidad de características: Selecciona automáticamente...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

CVE-2024-36401

CVE-2024-36401 Vulnerabilidad de Ejecución Remota de Código RCE en la evaluación de expresiones de nombres de propiedades GeoServer es un servidor de código abierto que permite a los usuarios compartir y editar datos geoespaciales. Antes de las versiones 2.23.6, 2.24.4 y 2.25.2, múltiples...

CVE-2024-36401-poc

CVE-2024-36401 — GeoServer OGC XPath 인젝션 RCE OGC 필터 valueReference 매개변수 인젝션XPath/JXPath 평가을 통한 GeoServer 무인증 원격 코드 실행RCE 익스플로잇. 면책 고지: 이 도구는 승인된 침투 테스트 및 보안 연구 목적으로만 제작되었습니다. 소유하지 않았거나 명시적인 서면 테스트 승인을 받지 않은 시스템에는 사용하지 마십시오. 작성자는 이 도구로 인한 오용 또는 피해에 대해 어떠한 책임도 지지 않습니다. 목차 개요 영향을 받는 버전 기술 세부 정보 요구 사...

CVE-2026-82578 NextGen Healthcare Mirth Connect Improper Restriction of XML External Entity Reference

When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injection can allow data exfiltration and denial-of-service attacks...

EUVD-2026-76117

When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injection can allow data exfiltration and denial-of-service attacks...

CVE-2026-82578

NextGen Healthcare Mirth Connect is affected by an XXE injection vulnerability in its XML batch processing feature. When the XPath option is selected, raw batch input is processed through a default XPath/JAXP parser with no entity restrictions , allowing an unauthenticated, network-based attacker...

Security_Article

SecurityArticle scrapy website Article and link ... 0x01 Crear un nuevo proyecto 0x02 Definir los objetivos 0x03 Crear el crawler 0x04 Almacenar contenido e.g. pip3 install lxml,scrapy root@kitploit: 文章标题 ArticleTitle //@id="wrapper"/main/div/article/header/h5/a/text...

CVE-2026-89043

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...

CVE-2026-89043 passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...

CVE-2026-89043

passport-saml-encrypted through version 0.1.13 is affected by an XML signature wrapping vulnerability. The root cause is that signature verification and assertion extraction use independent XPath lookups with no cross-validation (see saml.js lines 256 and 328). An attacker holding any validly sig...

EUVD-2026-75632

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...

GeoServer and GeoTools - Remote Code Execution

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...

xpath

xpath Escáner avanzado de inyección XPath para pruebas de seguridad autorizadas. Codificado por Chokri Hammedi blue0x1 · Licencia MIT Descripción general xpath es un escáner de inyección XPath rápido y con múltiples técnicas escrito en Nim. Se centra en la detección práctica, la comparación de...

CVE-2025-11844-smolagents

🔐 Marco de Simulación de Inyección XPath de Smolagents CVE-2025-11844 Un sandbox educativo de auditoría y un escáner dinámico de prueba de concepto que demuestra la vulnerabilidad de inyección XPath encontrada en la biblioteca smolagents de Hugging Face hasta la versión 1.2.0. 🔍 Perfil de...

GeoServer RCE in Evaluating Property Name Expressions

In the GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer, multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expression...

CVE-2025-71406

Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use-after-free vulnerabilities: CVE-2025-24855 use-after-free of the XPath context node due to xsltEvalXPathStringNs leaking xpathCtxt-node and CVE-2024-55549 use-after-free related to excluded result...