xml

MAN-EAM-0003 V3.2.4 – XXE

# Exploit Title: MAN-EAM-0003 V3.2.4 - XXE

Microsoft Windows mshta.exe 2019 – XML External Entity Injection

# Exploit Title: Microsoft Windows mshta.exe 2019 - XML External Entity Injection

BlogEngine 3.3 – ‘syndication.axd’ XML External Entity Injection

# Title: BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection

ExpertGPS 6.38 – XML External Entity Injection

[+] Exploit Title: ExpertGPS 6.38 - XML External Entity Injection

Citrix XenMobile Server 10.8 – XML External Entity Injection

# Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection

Easy XML Editor 1.7.8 – XML External Entity Injection

# Exploit Title: Easy XML Editor 1.7.8 - XML External Entity Injection

MSN Password Recovery 1.30 – XML External Entity Injection

# Exploit Title: MSN Password Recovery 1.30 - XML External Entity Injection

Microsoft Visual Basic 2010 Express – XML External Entity Injection

# Exploit Title: Microsoft Visual Basic 2010 Express - XML External Entity Injection

Microsoft Windows Media Center 2002 – XML External Entity MotW Bypass

# Exploit Title: Microsoft Windows Media Center 2002 - XML External Entity MotW Bypass

Visual Studio 2008 – XML External Entity Injection

# Exploit Title: Visual Studio 2008 - XML External Entity Injection

Microsoft Excel 2016 1901 – XML External Entity Injection

# Exploit Title: Microsoft Excel 2016 1901 - XML External Entity Injection

XML Notepad 2.8.0.4 – XML External Entity Injection

# Exploit Title: XML Notepad 2.8.0.4 - XML External Entity Injection

Citrix StoreFront Server 7.15 – XML External Entity Injection

# Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection

Winrar 5.80 – XML External Entity Injection

# Exploit Title: winrar 5.80 - XML External Entity Injection

SDL Web Content Manager 8.5.0 – XML External Entity Injection

######################

NovaRad NovaPACS Diagnostics Viewer 8.5 – XML External Entity Injection (File Disclosure)

# Title: NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection (File Disclosure)

Plex Media Server 1.13.2.5154 – SSDP Processing XML External Entity Injection

Issue: Out-of-Band XXE in Plex Media Server's SSDP Processing

Vuze Bittorrent Client 5.7.6.0 – SSDP Processing XML External Entity Injection

Issue: Out-of-Band XXE in Vuze Bittorrent Client's SSDP Processing

Universal Media Server 7.1.0 – SSDP Processing XML External Entity Injection

Issue: Out-of-Band XXE in Universal Media Server's SSDP Processing

OX App Suite 7.8.4 – Multiple Vulnerabilities

Product: OX App Suite

Geist WatchDog Console 3.2.2 – Multiple Vulnerabilities

# Exploit Author: bzyo

KYOCERA Multi-Set Template Editor 3.4 – Out-Of-Band XML External Entity Injection

#Vendor: KYOCERA Corporation

Systematic SitAware – NVG Denial of Service

# Exploit Title: SitAware NVG Denial of Service

Hikvision IP Camera versions 5.2.0 – 5.3.9 (Builds 140721 < 170109) - Access Control Bypass

# Exploit Title: Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds: 140721 - 170109) Backdoor

Ladon Framework for Python 0.9.40 – XML External Entity Expansion

Advisory: XML External Entity Expansion in Ladon Webservice

Oracle Java SE – Web Start jnlp XML External Entity Processing Information Disclosure

#!/usr/local/bin/python

Apache Solr 7.0.1 – XML External Entity Expansion / Remote Code Execution

First Vulnerability: XML External Entity Expansion (deftype=xmlparser)

QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities

1. --- Advisory details ---

Trend Micro Deep Security 6.5 – XML External Entity Injection / Local Privilege Escalation / Remote Code Execution

The following advisory describes three (3) vulnerabilities found in Trend Micro Deep Security version 6.5.

SAP Business One for Android 1.2.3 – XML External Entity Injection

Exploit Title: Blind XXE (XML External Entity)in SAP

INFOR EAM 11.0 Build 201410 – ‘filtervalue’ SQL Injection

SQL injection in INFOR EAM V11.0 Build 201410 search fields (web/base/..) via filtervalue parameter

INFOR EAM 11.0 Build 201410 – Persistent Cross-Site Scripting via Comment Fields

Stored XSS in INFOR EAM V11.0 Build 201410 via comment fields

Oracle PeopleSoft – XML External Entity to SYSTEM Remote Code Execution

#!/usr/bin/python3

Oracle PeopleSoft – ‘PeopleSoftServiceListeningConnector’ XML External Entity via DOCTYPE

Application: Oracle PeopleSoft

Adobe (Multiple Products) – XML Injection File Content Disclosure

#!/bin/bash

WatchGuard XTMv 11.12 Build 516911 – User Management Cross-Site Request Forgery

FTP Voyager Scheduler 16.2.0 – Cross-Site Request Forgery

2) Persistent Denial Of Service uses call to WMIC

Aruba AirWave 8.2.3 – XML External Entity Injection / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory < 20170301-0 >

SAP NetWeaver AS JAVA – ‘BC-BMT-BPM-DSK’ XML External Entity Injection

Application: SAP NetWeaver AS JAVA

Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 – XML External Entity Injection

# Exploit Title: Oracle BI Publisher (formerly XML Publisher) - XML External Entity Injection w/o authentication

RSA Enterprise Compromise Assessment Tool 4.1.0.1 – XML External Entity Injection

SEC Consult Vulnerability Lab Security Advisory < 20161011-0 >

Apache Archiva 1.3.9 – Multiple Cross-Site Request Forgery Vulnerabilities

RCE Security Advisory

CyberPower Systems PowerPanel 3.1.2 – XML External Entity Out-Of-Band Data Retrieval

CyberPower Systems PowerPanel 3.1.2 XXE Out-Of-Band Data Retrieval

Dell OpenManage Server Administrator 8.3 – XML External Entity

#!/usr/bin/ruby

SAP NetWeaver AS JAVA 7.1 < 7.5 - SQL Injection

Application: SAP NetWeaver AS JAVA

SAP NetWeaver AS JAVA 7.1 < 7.5 - Information Disclosure

Application:SAP NetWeaver AS JAVA

Wieland wieplan 4.1 – Document Parsing Java Code Execution Using XMLDecoder

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder

Atlassian Confluence 5.2/5.8.14/5.8.15 – Multiple Vulnerabilities

[Systems Affected]

OpenMRS 2.3 (1.11.4) – Expression Language Injection

OpenMRS 2.3 (1.11.4) Expression Language Injection Vulnerability

OpenMRS 2.3 (1.11.4) – Local File Disclosure

OpenMRS 2.3 (1.11.4) Local File Disclosure Vulnerability