665 matches found
NmapReportTemplate
Nmap Report Template Template designed to dynamically display information obtained from Nmap Scan Screenshots Usage 1. Download the nmaptemplatereport.xsl file and, when running Nmap , pass the file as a stylesheet. Example nmap --open -A -T4 -F --script vulners -oX scanoutput.xml --stylesheet...
nmap-bootstrap-xsl
nmap-bootstrap-xsl Have a nice interface for checking the result of your Nmap scans. This software must not be used by military or secret service organisations. How to use 1. New Nmap scan Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan with the --stylesheet argument : nmap -sS -T4 -A...
CVE-2011-1571
CVE-2011-1571 Summary Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. CVE Detail :...
CVE-2026-109803
SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...
CVE-2026-109803 Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)
SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...
CVE-2026-109803 Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)
SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...
EUVD-2026-120686
SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...
CVE-2026-109803
The SAP NetWeaver Knowledge Management (XML Forms) component contains a code injection vulnerability where it fails to sufficiently restrict the selection of XSL transformations processed by its functionality. An authenticated user with appropriate access could trigger an unauthorized XSL transfo...
PT-2026-141250
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management XML Forms affected versions not specified Description SAP NetWeaver Knowledge Management, specifically the XML Forms component, does not sufficiently restrict the selection of XSL transformations. This allows...
CVE-2026-109803: SAP_SE SAP NetWeaver Knowledge Management (XML Forms): SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations…
SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...
CLEANSTART-2024-UR48687 By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab wa...
Security vulnerability affects the librewolf package. By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin policy even after the tab was closed...
CLEANSTART-2024-MX03398 By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab wa...
Security vulnerability affects the firefox package. By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin policy even after the tab was closed...
AZL-111703 CVE-2026-103995 affecting package docbook5-style-xsl 1.79.2-11
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2025-10911)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via FopProducer in the FOP component. When an alternative JAXP TransformerFactory is on the classpath, an attacker can make the Camel process read files it can access or send requests to...
CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...
CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...
CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...
CVE-2026-91858
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...
EUVD-2026-104208
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...