EulerOS 2.0 SP10 : expat (EulerOS-SA-2024-1881)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for...

PT-2024-28950

Name of the Vulnerable Software and Affected Versions Fastapi OPA versions prior to 2.0.1 Description The issue allows unauthenticated attackers to discover which entities exist within an application by sending HTTP OPTIONS requests. This is because OpaMiddleware allows all HTTP OPTIONS requests...

EulerOS 2.0 SP10 : expat (EulerOS-SA-2024-1905)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for...

VulnCheck KEV: CVE-2024-34102

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that...

RHEL 8 : expat (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - expat: Stack exhaustion in doctype parsing CVE-2022-25313 - libexpat through 2.5.0 allows recursive XML...

MAL-2024-7715 Malicious code in komcay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad3ad3da1b41f64619c16ccbdcd725acffd6c557ba6029fe77287ddec8b6c886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7713 Malicious code in komcax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c911bd41972a2fa3147e74bc8e6a7905d586c2f095b8190453f09f9250c613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in komcay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad3ad3da1b41f64619c16ccbdcd725acffd6c557ba6029fe77287ddec8b6c886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7717 Malicious code in stylecshert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd9222f2e9e0e525a219159b5ce16c4ff17fe52d2b7e31e284a8114c681e24a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7722 Malicious code in tilda-date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98b7d3c762a3af730da420104e9016e9ca64e0313f7195afe1a8b29be029275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylesnox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231ba61276a9baae8583e87d40a97b7ee4c4dff960555a6df856c57ed2adff0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7711 Malicious code in jqueryxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa56bed3cb6a5adca01b8c14e48b17a0c6d2807089f8bf5dbbd4e871a7684d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7702 Malicious code in cloudhost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8e1813e9e9ae1dd5749ee815f32696a16d538138675ee92e5cd2272e6c870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7708 Malicious code in fontwesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acc8178b860313a9afa65a0284791afe1f0a2b63d7dfa62a48686e7928b073e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xytta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 916ceecd4a8d98031aba5ab21f6606f421c47e979940df17befdf347136ec55f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7712 Malicious code in kimakz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca91a55f9ab5cf29a121c246b279342ce7156bb4ecd899f7d5e98f63161560c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mobiletrack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3a464415caaaafd6b062af71a195f028faa18254aacdf4d305a41a3c7a669e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylishtekss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e50e24e990988cb82dbfcca59fe8122cc1cc6f9839ca29b1303696dbc3608b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7475 Malicious code in stylishhteks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7ae115a3f473013d0ef082a8248081b7ba44388a767650b9cf36ff622e657b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7476 Malicious code in stylishtekss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e50e24e990988cb82dbfcca59fe8122cc1cc6f9839ca29b1303696dbc3608b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...