[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2015-0254":3,"landing-articles":70},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":14,"technologies":18,"references":21,"score":53,"epss_score":54,"epss_percentile":55,"is_kev":10,"cisa_kev_date_added":56,"cisa_kev_due_date":56,"cisa_ssvc":57,"attack_mappings":67,"exploits":68},183066,"CVE-2015-0254","EUVD-2020-0826","XXE in Apache Standard Taglibs\n\nApache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003Cx:parse> or (2) \u003Cx:transform> JSTL XML tag.","2020-09-14T18:44:00Z",{},false,[12,13],"NVD-CWE-Other","CWE-611",[15,16,17],"cpe:2.3:a:apache:standard_taglibs:*:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*",[19,20],"Canonical Ubuntu Linux","Apache Standard Taglibs",[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52],"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2015-10\u002Fmsg00033.html","http:\u002F\u002Fmail-archives.apache.org\u002Fmod_mbox\u002Ftomcat-taglibs-user\u002F201502.mbox\u002F%3C82207A16-6348-4DEE-877E-F7B87292576A%40apache.org%3E","http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F130575\u002FApache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1695.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1838.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1839.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1840.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1841.html","http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2017-3236622.html","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F534772\u002F100\u002F0\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F72809","http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1034934","http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2551-1","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2016:1376","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f%40%3Cpluto-dev.portals.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38%40%3Cpluto-dev.portals.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fre3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077%40%3Cpluto-scm.portals.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d%40%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Fwww.oracle.com\u002F\u002Fsecurity-alerts\u002Fcpujul2021.html","https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2020.html","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2015-0254","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914@%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f@%3Cpluto-dev.portals.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38@%3Cpluto-dev.portals.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fre3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077@%3Cpluto-scm.portals.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d@%3Cdev.tomcat.apache.org%3E",0,0.12758,0.96277,null,{"timestamp":58,"automatable":59,"tech_impact":60,"exploitation":61,"cisa_decision":62,"cisa_remediation_timeline":66},"2026-10-14T21:06:28.702053Z","yes","total","none",{"vector":63,"decision":64,"priority":65},"CISAv1\u002FE:N\u002FA:Y\u002FT:T\u002FM:H\u002F2026-10-25T02:14:39.982832\u002F","attend","medium","3D",[],[69],{"link":24},{"count":71,"next":72,"previous":56,"results":73},30,"http:\u002F\u002Fweb:8606\u002Fapi\u002Farticles\u002F?page=2&sorted_by=-published_at",[74,81,89,97,104,111,118,123,130,137],{"id":71,"title":75,"summary":76,"published_at":77,"type":78,"link":79,"image_url":80},"PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)","Unauthenticated code execution demonstrated on WordPress, Drupal and Joomla, and reproduced in our lab. Patched versions and steps to take today.","2026-10-22T00:00:00Z","cve","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fc0615c4ee6-1792684469\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2.png",{"id":82,"title":83,"summary":84,"published_at":85,"type":86,"link":87,"image_url":88},29,"Manage External Security Across All Your Entities","Centralize the management of entities, users and external security resources while maintaining strict data isolation with Patrowl.","2026-09-15T00:00:00Z","security tips","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fmulti-entity-external-security-how-structure-governance-group-level","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F8b2c0cc5eb-1789551467\u002Fvisu_1_multi_tenancy_dark_1x.webp",{"id":90,"title":91,"summary":92,"published_at":93,"type":94,"link":95,"image_url":96},28,"Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34","Tax law, finance, legislation: Bruce Schneier shows how AI could hack human rule systems just as easily as it hacks software.","2026-09-14T00:00:00Z","hacks","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fbruce-schneier-def-con-34","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F5c616d9db4-1789462598\u002Fai-hacker.en.png",{"id":98,"title":99,"summary":100,"published_at":101,"type":86,"link":102,"image_url":103},27,"Exposure Management: definition, stakes, and how it works","Vulnerabilities, misconfigurations, poorly managed identities: understand what Exposure Management is and why it matters in 2026.","2026-09-10T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdefinition-exposure-management","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F06170638a9-1789050834\u002Fexposure.management.definition.en.png",{"id":105,"title":106,"summary":107,"published_at":108,"type":94,"link":109,"image_url":110},26,"DGFiP Cyberattack 2026: Inside the Attacker","Two distinct attacks hit France","2026-08-17T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdgfip-cyberattack-2026-inside-attacker-mind","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fdc38d33696-1787055371\u002Fdgfip-2026.png",{"id":112,"title":113,"summary":114,"published_at":115,"type":78,"link":116,"image_url":117},25,"CVE-2026-64638: XSS2Shell, a WordPress Login Vulnerability","Pre-auth XSS on wp-login.php, patched August 6. What is actually exploitable, and how to read it in your Patrowl report.","2026-08-10T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fxss2shell-critical-wordpress-login-vulnerability-2026","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F904e61748b-1786369212\u002Fxss2shell.png",{"id":119,"title":120,"summary":120,"published_at":115,"type":78,"link":121,"image_url":122},24,"CVE-2026-64638 : XSS2Shell, faille du login WordPress","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fcve-2026-64638-xss2shell-faille-login-wordpress","",{"id":124,"title":125,"summary":126,"published_at":127,"type":78,"link":128,"image_url":129},23,"How Agentic AI Hunts Down CVEs Before Attackers Do","38 vulnerability sources monitored around the clock, pentester-validated proof of exploitability, an alert within hours. See how it works.","2026-08-05T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fproactive-threat-hunting-agentic-ai-cve","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F804988ce7b-1785930160\u002Fproactive-threat-hunting-how-agentic-ai-tracks-cves.png",{"id":131,"title":132,"summary":133,"published_at":134,"type":94,"link":135,"image_url":136},22,"AI Agent Incident: OpenAI HuggingFace — Risks and Lessons","An autonomous AI agent escaped its sandbox via a JFrog Artifactory zero-day, compromised HuggingFace via privilege escalation and stolen credentials. Reconstructed timeline and security lessons.","2026-07-31T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fai-agent-incident-openai-huggingface-risks","[Image URL from Kirby]",{"id":138,"title":139,"summary":140,"published_at":141,"type":86,"link":142,"image_url":143},21,"SaaS Under Watch: What Your SDLC Doesn","Your pipeline is green. Your real exposure may have changed without you knowing it. The complete guide for software vendors.","2026-07-29T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fsecuring-saas-application-software-vendor","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F20d6ec0cd0-1785331401\u002Fapplication-security.png"]