wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a...Read More ...

Continue Reading

January 29, 2024

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component...Read More ...

Continue Reading

January 29, 2024

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component...Read More ...

Continue Reading

January 29, 2024

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component...Read More ...

Continue Reading

January 29, 2024

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component...Read More ...

Continue Reading

January 29, 2024

The remote host is affected by the vulnerability described in GLSA-202401-26 (Apache XML-RPC: Multiple Vulnerabilities) XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) ...

Continue Reading

January 23, 2024

Background Apache XML-RPC (previously known as Helma XML-RPC) is a Java implementation of XML-RPC, a popular protocol that uses XML over HTTP to implement remote procedure calls. Description Multiple ...

Continue Reading

January 22, 2024

Apache OFBiz versions before 18.12.10 suffer from an authentication bypass vulnerability and a deserialization vulnerability on the /webtools/control/xmlrpc endpoint. By crafting a malicious serialize ...

Continue Reading

January 05, 2024