vm2mv/tinyxml

PoC

TinyXML 2.6.2 with fixes for CVE-2021-42260 and CVE-2023-34194

view exploit source poc_in_githubauthor vm2mvpublished 2024-12-04catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-34194US	high7.5	1.37% (72nd)	Exploit	2023-12-13
StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located…
CVE-2021-42260US	high7.5	3.38% (89th)	Exploit	2021-10-11
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.