wxpath

wxpath - recorrido declarativo de grafos web con XPath NUEVO: TUI – Interfaz de terminal interactiva impulsada por Textual para probar expresiones wxpath y exportar datos. Instalación Requiere Python 3.10+. pip install wxpath For TUI support: pip install "wxpathtui" Immediately launch the TUI via...

xcat

XCat XCat 是一个命令行工具，用于利用和探测盲 XPath 注入漏洞。 完整参考请阅读文档：https://xcat.readthedocs.io/en/latest/ 它支持大量功能： 自动选择注入点（运行 xcat injections 查看列表） 检测 XPath 解析器的版本和能力，并选择最快的检索方法 内置出站 HTTP 服务器 自动执行 XXE 攻击 可使用 OOB HTTP 请求大幅加速检索 自定义请求头与请求体 内置 REPL Shell，支持： 读取任意文件 读取环境变量 列出目录 上传/下载文件（即将推出） 优化的检索 若支持，则采用 Unicode...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

CVE-2024-36401

CVE-2024-36401 评估属性名称表达式时的远程代码执行（RCE）漏洞 GeoServer 是一个开源服务器，允许用户共享和编辑地理空间数据。在 2.23.6、2.24.4 和 2.25.2 版本之前，多个 OGC 请求参数允许未经身份验证的用户通过对默认 GeoServer 安装特制的输入来实现远程代码执行（RCE），原因是属性名称被不安全地作为 XPath 表达式进行求值。GeoServer 调用的 GeoTools 库 API 在评估要素类型的属性/属性名时，不安全地将它们传递给 commons-jxpath 库，而该库在评估 XPath 表达式时可以执行任意代码。此...

CVE-2024-45409

Ruby-SAML / GitLab 认证绕过 CVE-2024-45409 漏洞利用 该脚本利用了 CVE-2024-45409 漏洞，允许未经身份验证的攻击者访问 IDP 签发的任何 SAML 文档，从而伪造 SAML 响应/断言，并以任意用户身份登录 GitLab。 以下 GitLab（CE/EE）版本均受影响： 您正在被 重定向。 参考 https://about.gitlab.com/releases/2024/09/17/patch-release-gitlab-17-3-3-released/...

CVE-2022-41852

JXPath 库远程代码执行 CVE-2022-41852 概念验证 CVE-2022-41852 允许攻击者在应用服务器上执行代码。 您可以在此处了解更多关于此漏洞的信息： https://hackinglab.cz/en/blog/remote-code-execution-in-jxpath-library-cve-2022-41852/ 注意： 我不是此 CVE 的作者。我只是创建了这个概念验证。 相关链接 JXPath GitHub JXPath 网站 MITRE CVE-2022-41852 NIST CVE-2022-41852 漏洞描述 JXPath 库支持在 XPath...

GeoServer and GeoTools - Remote Code Execution

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...

CVE-2024-36401-poc

CVE-2024-36401 — RCE por Inyección XPath OGC en GeoServer Exploit de ejecución remota de código sin autenticación para GeoServer mediante inyección del parámetro valueReference de filtro OGC evaluación XPath/JXPath. Aviso legal: Esta herramienta está diseñada únicamente para pruebas de penetració...

Security_Article

SecurityArticle scrapy website Article and link ... 0x01 新建项目 0x02 明确目标 0x03 制作爬虫 0x04 存储内容 e.g. pip3 install lxml,scrapy 文章标题 ArticleTitle //@id="wrapper"/main/div/article/header/h5/a/text //@id="wrapper"/main/div/article/header/h5/a 文件链接 ArticleLink...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_4797)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20254797 advisory. firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-408...

Linux Distros Unpatched Vulnerability : CVE-2026-87830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2025_4458)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20254458 advisory. firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-408...

Rocky Linux 9 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource / firefox-x11 Multiple Vulnerabilities (crlsa-2025_7428)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257428 advisory. firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-408...

Linux Distros Unpatched Vulnerability : CVE-2026-103044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML injection aka blind XPath injection vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_4460)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20254460 advisory. firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-408...

Rocky Linux 9 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource / firefox-x11 Multiple Vulnerabilities (crlsa-2025_4443)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20254443 advisory. firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-408...

AlmaLinux 9.6 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (ALMALINUX9.6:CLSA-2026:1767608985)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767608985 advisory. - Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow...

CVE-2025-11844-smolagents

🔐 Smolagents XPath 注入模拟框架（CVE-2025-11844） 一个教育性审计沙箱和动态概念验证扫描器，演示了 Hugging Face 的 smolagents 库（最高版本 1.2.0）中发现的 XPath 注入漏洞。 🔍 漏洞概况 指标| 详情 ---|--- CVE ID| CVE-2025-11844 目标组件| visionwebbrowser.py 中的 searchitemctrlf 函数 漏洞类型| 输入验证不当 - XPath 注入 / DOM 逃逸 影响范围| 本地数据提取、信息泄露、任意 DOM 遍历 🚨 攻击向量分析...

CVE-2026-87830

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...

DEBIAN-CVE-2026-87830

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...