MAL-2024-11150 Malicious code in notworking-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da772f6092546f23222b6903ba819da287d6088d1a5e448aefbd364e65498413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11141 Malicious code in evil-package-for-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a239752739844b809432df8dcc829f77e1a30400c98e4d475d703d3fd7dceb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11152 Malicious code in randompathlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c6130d1739fac45df45a04aad9725b130073eb91f6d7801254242cac74edae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11136 Malicious code in discord-json-requests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e36715204598c156e07aa9b146c861f5481df2d94c91e92f85569f217fa4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11128 Malicious code in agoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8556377fff6ad9dfc3bb12eac1be9583621abe348598c4a9a835c3103eb76089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XML Entity Injection Vulnerability in U8Cloud of UFIDA Network Technology Co.

U8cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. UFIDA U8Cloud suffers from an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive...

EasyTax security vulnerability

EasyTax is a taxpayer tax filing software organized by AG Switzerland. A security vulnerability exists in EasyTax 2023 version 1.2 and earlier, which stems from an XML External Entity XXE vulnerability on multiple platforms, including Windows, Linux, and macOS...

PT-2024-39386 · Unknown · Easy Tax Client

Name of the Vulnerable Software and Affected Versions: Easy Tax Client Software 2023 versions 1.2 and earlier Description: A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software across multiple platforms, including Windows, Linux, and macOS. Recommendations: For...

CVE-2024-9044: Improper Restriction of XML External Entity Reference

A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...

CVE-2024-52800: Improper Restriction of XML External Entity Reference

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. This doesn't affect the standard validation and policy checks functionality...

XML External Entity (XXE) Injection

HAPI FHIR is vulnerable to XML External Entity XXE Injection. The vulnerability is due to insecure XML parsing by HAPI FHIR, specifically within the XSLT parsing components, which improperly handle external entity references in XML files. It allows attackers to inject malicious XML content, such ...

XML External Entity (XXE)

phpoffice/phpexcel is vulnerable to an XXE XML External Entity. The vulnerability is due to improper parsing of XML data, which allows attackers to inject external entities and potentially access sensitive files or execute malicious code...

MAL-2024-11119 Malicious code in exwx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b49adfe29064d8cd3b5231b88df336858fb6897be7f624b8402782e303c58c31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wxpc2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 442452b5b5132567f4b131cd1df065a333aebb163935095711fb1e3bac96af46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11120 Malicious code in galacticspacebananas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caab1cc3d0cf50b90d40c30a89f239ea365d2a99958ccd92eebd71aac2175183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11033 Malicious code in dogwiftools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072830cdf24f92d02ea5bb6ca4b9c474b7fa3a234ddfb1b98eaaccbc8cc06842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11031 Malicious code in bruteforcetool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d2db7c9c1264028f32963c02b1f65ffdea78b77eb4b5fe76e8c2989de75764 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11034 Malicious code in eacfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af7a2232efa9655a28d7e875a3193e3e516863ec0ca7131bfa51ea1a51e0e734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Liberty

Summary Multiple vulnerabilities were addressed in Financial Transaction Manager 4.0.6.0 iFix4 Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External...

MAL-2024-11028 Malicious code in assetmantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dddd918f13d7e544f8d420513711de48ce49d7c545668b49d312d4054ff4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...