MAL-2024-8425 Malicious code in @diotoborg/modi-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00bec08eeb175b83a43d0938aa51d71e9d4bb0e81d4ddfc9d91714d0765f96ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8542 Malicious code in @diotoborg/quaerat-eius (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1692e480f45d5350b281a70849c71c99ecb37ae4f751d0341e81232533ac8171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8612 Malicious code in @diotoborg/repellendus-est (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 025ad2a4a8a3e55e1596e4acea55c95e0a3acb90c397b7677ff2763ad776c7d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8104 Malicious code in @diotoborg/accusamus-nesciunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264f705823a5a8a6f9d3afaab2ea7592aa87589318be53446f5813f93db619e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8510 Malicious code in @diotoborg/optio-provident-omnis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc453c5b757978738907b9a9b8be9dfb6793b8cb4ebe72a90b201983493bd9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8595 Malicious code in @diotoborg/recusandae-omnis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ebe9f1c7b61f9bb7e288e6a5d9d7bebedfeaa81a51ec8f02725be2f60bc72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8405 Malicious code in @diotoborg/libero-debitis-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3962d51f7dd049fb20be0c78ca98fa5523c78987020230d2704c70bdc118e4c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8232 Malicious code in @diotoborg/distinctio-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a7ae92abdd8ec95b10dca1fcc75b714e34212d279c383b675c942d50b97f95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8476 Malicious code in @diotoborg/non-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfc15fc5f38fd3f6e22dba7c6a6376651aa64706e3e0602a50903b3068117782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8224 Malicious code in @diotoborg/dicta-recusandae-veniam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec79f36c2a8336b9840f24bfc59847acfb4e18a7909792f533ece2397a29d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8185 Malicious code in @diotoborg/consequuntur-dolorem-dicta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f213e5ae0b66204727b039d73a0c80ce3554366c5cfe52e65f43fc9da97cd90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8244 Malicious code in @diotoborg/dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594648a6e233b1180f89cb194e6ddf0cebf9f265ae0f11b2b6d13533ccfc1d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8298 Malicious code in @diotoborg/est-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 123216ff6075f5c5fd7c70158b40456dc13dd5b468ee52df0fd1491f9c54b71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8358 Malicious code in @diotoborg/illum-ad-corporis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45508

creationtimestamp| type| source ---|---|--- 2024-09-02 01:19:48+00:00| seen| https://t.me/cvedetector/4585...

Adobe XML External Entity Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Adobe XML External Entity Injection', 'Description' = %q Multiple Adobe Products -- XML External Entity Injection. Affected Software: BlazeDS 3.2...

Atlassian Crowd XML Entity Expansion Remote File Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Crowd XML Entity Expansion Remote File Access', 'Description' = %q This module simply attempts to read a remote file from the server...

OpenNMS Authenticated XXE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'OpenNMS Authenticated XXE', 'Description' = %q OpenNMS is vulnerable to XML External Entity Injection in the Real-Time Console...

Nexpose XXE Arbitrary File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'nexpose' class MetasploitModule 'Nexpose XXE Arbitrary File Read', 'Description' = %q Nexpose v5.7.2 and prior is vulnerable to a XML External Entity attack via...