MAL-2024-7121 Malicious code in @zitterorg/architecto-a-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc6f26c2fdd17d964672f107346b4596f1035eb774f3ef461489b47456100a45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7331 Malicious code in @zitterorg/praesentium-voluptatum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ae2d233825ca527f6fc480a5820ddf85924743f596f2d8bd08582939d740f81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7322 Malicious code in @zitterorg/perferendis-aperiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ada3ec39d38fc41130d50c883a8ca0c97c4de7875cf9b79f6a5ba20cccdc627 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7233 Malicious code in @zitterorg/inventore-at-sit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3d807c96dc4c91b01a46510b06d4f6a1a6a28ac0147f7c820316ea8e8902517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7237 Malicious code in @zitterorg/ipsam-deserunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cab2ccccac6b11faf8865707664b022135deb9ca3fc59c57b7c325ebf43f82c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7305 Malicious code in @zitterorg/numquam-assumenda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40dbf80466e6d61a5d3a5331f58a83a7b50dfd54cce4a29d3a1bb254b9814df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7204 Malicious code in @zitterorg/eum-veritatis-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef9b1d329eea55f78b26e169fc313a112377bc0ba47ab8ba975192c44a752d17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7188 Malicious code in @zitterorg/eius-sint-sunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8622543dc415d5674043dc15605c80ae0eb29f20f8198b23b808f159ef1b9305 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7409 Malicious code in @zitterorg/voluptate-aliquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d6d2150694a90ba597cf02d3bdb834a44388c3cff43d4aaeabbb893a45626a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7369 Malicious code in @zitterorg/repellendus-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c107ede46e319fb0c1f9d0133b1cbe3e2d88caf4c286a24b84b913b5f0663ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7229 Malicious code in @zitterorg/in-labore-ratione (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f193c45bf6880affac50644abd21f3b999c372d2ed9092c69d80228fe88aec47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7261 Malicious code in @zitterorg/magnam-doloribus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a2c0fe3e29bb3384921b1a0aff2c39c54bae151176af9eb6a3536f1d18006f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7351 Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7374 Malicious code in @zitterorg/repudiandae-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06241bc57f5320925f66ab1506bc038df088d5600d2540aba83a38d900a0be5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20240704-05

Vulnerability in the OpenSearch software package related to incorrectly restricting reference to an external XML entity. Exploitation of the vulnerability could allow an attacker to conduct XXE attacks...

K000140250: Expat vulnerability CVE-2023-52426

Security Advisory Description libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. CVE-2023-52426 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the...

MAL-2024-7094 Malicious code in auth0-dashboard-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd3d9dcd233e8f88bec84813744dcf3ea68a677d4025fd66d55d2f1190be1b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7096 Malicious code in msa-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ed49b2fd60a4f02b928360047bfd5c5d86159fb1e1b86c27b528a72dda41151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack.(CVE-2024-2235)

Summary IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume...

Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to XML External Entity Injection attack due to IBM WebSphere Application Server Liberty (CVE-2024-22354)

Summary IBM WebSphere Application Server Liberty is shipped with IBM Tivoli Netcool Impact as part of its server infrastructure. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. Vulnerability Details...