Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-39908 PoC — Denial of service in REXML

Source
https://github.com/SpiralBL0CK/CVE-2024-39908
Associated Vulnerability
Title:Denial of service in REXML (CVE-2024-39908)
Description: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`, `0` and `%>`. If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the patches to fix these vulnerabilities. Users are advised to upgrade. Users unable to upgrade should avoid parsing untrusted XML strings.
Description
CVE-2024-39908 full poc
Readme
# CVE-2024-39908
CVE-2024-39908 full poc
File Snapshot

 [4.0K]  /data/pocs/17595669de36cc175578a3a1acdd9e72ff5596d5
├── [3.5K]  hack.xml
└── [  41]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →