xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. (CVE-2022-25235)Read More ...
Continue ReadingMay 30, 2022
An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management i ...
Continue ReadingMay 30, 2022
wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a post.Read More ...
Continue ReadingMay 30, 2022
**Issue Overview:** A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences (for example, from start tag names) to the XML processing application on top of expat can lead to arbitra ...
Continue ReadingMay 30, 2022
Post ContentRead More ...
Continue ReadingMay 30, 2022
ReadyAPI 2.5.0 2.6.0 - Remote Code ExecutionRead More ...
Continue ReadingMay 30, 2022
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.Read More ...
Continue ReadingMay 30, 2022
Post ContentRead More ...
Continue ReadingMay 30, 2022
Back to Main