MAL-2024-938 Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-934 Malicious code in iifl_ios_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87649558fc7b693ec6cc0ca38419068e0fce94a2f6a6eeb5d01dad7674980357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OpenText AppBuilder Code Issue Vulnerability

OpenText AppBuilder is an application from OpenText Canada. A security vulnerability exists in OpenText AppBuilder versions 21.2 through 23.2, which originates from XML External Entity Injection and allows server-side requests to forge, probe system files...

[SECURITY] [DLA 3723-1] libspreadsheet-parsexlsx-perl security update

Debian LTS Advisory DLA-3723-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 27, 2024 https://wiki.debian.org/LTS Package : libspreadsheet-parsexlsx-perl Version : 0.27-2+deb10u1 CVE ID : CVE-2024-22368 CVE-2024-23525 Debian Bug : 1061098 Security...

PT-2024-40759 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include the crash state with functions such as dwg free common entity data, dwg free...

libxml2: dict corruption caused by entity reference cycles

A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted resulting in logic errors, including memory errors like double free...

expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

XML External Entity (XXE)

Spreadsheet::ParseXLSX is vulnerable to XML External Entity XXE. The vulnerability is caused due to neglecting noxxe option of XML::Twig. This can be exploited to compromise Confidentiality of the system...

MAL-2024-165 Malicious code in distube-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ac3f289f159fa4961391d20b8dbb4b10a0467ac4654073bcc0aa7863caf8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbc0976e1337a3efa48a52f77fdef02a7087dc45ceae46bbf74c460027671342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-908 Malicious code in wlwz-2312-8109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b142a0f7e3a073d733c5173f30071ba189294b64eff717882b0679e6226560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-875 Malicious code in wlwz-2312-7803 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f87c102b856c1c61da6c752cb2807fe42fc278f31728ebdecdd5e233f8c56444 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-877 Malicious code in wlwz-2312-7805 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec6418669fad29e4f0f3245f19ca664b595d0d20339a72a2cb4414157e624b85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-910 Malicious code in wlwz-2312-8201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 663e6f2eed1c67a480f59e225cd7282d5ec20cf6fb00d4887f06c6a49794a9b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-883 Malicious code in wlwz-2312-7902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc4c555cd9b6629dc3e1ef3e7b51a4ec04a28cc7bfe43abf7864a9c38acbd604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-894 Malicious code in wlwz-2312-8004 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe20d610fac42ed237437021b64cb0e9dd8edffe8b40ca212f8064bec973dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-902 Malicious code in wlwz-2312-8103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b7ef89aa825a4b724a25a95595bc1af6bc7590b373b4ca0b62abbf7acaf2a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-315 Malicious code in wlwz-2312-1601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bc0e7158d5619f4e675f0c91a267739b04b6497be26ddeaa336c28335e8a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-857 Malicious code in wlwz-2312-7603 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11dafef5a7039e9f4bd8baaff2ea7aa10bf4249063e555211e098f87272c13a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-873 Malicious code in wlwz-2312-7801 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf66057ed5652a0d2838dfdee19edebb9c1011169b2fb7cce34c906f919cc25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...