21144 matches found
Grayling APT Emerges as a Silent Threat Targeting Taiwan
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The Grayling APT group orchestrated a meticulously planned targeting campaign with a primary emphasis on espionage. Grayling set its sights on a government entity in the Asia-Pacific region, along with...
MAL-2023-8341 Malicious code in n-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3eea908e1ac1801f4b2bfda0ee3333942a9af0f46e5f4e2b41de2a2b8d9b66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8334 Malicious code in @emon-bhai/fca-emon-bhai-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dda8cf587fd89dbb973a1ad2d9121439dd65185b74c76fe48d5425e2967f400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8340 Malicious code in fca-emon-bhai-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7597210d8449795cfeb232c861661dd973e59c2d8e561d96acadf84c6b773d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Debian: Security Advisory (DLA-3614-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3614-1] python3.7 security update
Debian LTS Advisory DLA-3614-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 11, 2023 https://wiki.debian.org/LTS Package : python3.7 Version : 3.7.3-2+deb10u6 CVE ID : CVE-2022-48560 CVE-2022-48564 CVE-2022-48565 CVE-2022-48566 CVE-2023-40217 Several...
Debian dla-3614 : idle-python3.7 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3614 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3614-1 [email protected]...
CVE-2023-40310
SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external entities in BPMN2 file, although not used, would be accessed during import. A successful attack could impact availability of SAP...
PT-2023-5923 · Sap · Sap Business One
Name of the Vulnerable Software and Affected Versions: SAP Business One B1i version 10.0 Description: The issue is related to the error reporting mechanism in SAP Business One, which allows an authorized attacker to retrieve the details of a fault message. This can be exploited to conduct an XXE...
CLSA-2023-1696880318 python2: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...
python: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...
CLSA-2023-1696878189 python: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...
CLSA-2023-1696878020 python: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...
CLSA-2023-1696877835 python: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...
CLSA-2023-1696877712 expat: Fix of 2 CVEs
CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XMLExternalEntityParserCreate...
MAL-2023-8315 Malicious code in emob-lp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c69ecc160f72c29544fec3ce637a39a70d5d458f1e42487180d41443154116f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
JetBrains Ktor Code Issue Vulnerability
JetBrains Ktor framework is a web application framework from the Czech company JetBrains. A code issue vulnerability exists in JetBrains Ktor versions prior to 2.3.5 that stems from an XML External Entity Injection XXE vulnerability in the default configuration of ContentNegotiation...
SUSE SLED12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2023:4001-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4001-1 advisory. - CVE-2022-48566: Constant-time-defeating optimisations were possible in the accumulator variable in...
CVE-2023-42445 Possible local file exfiltration by XML External entity injection
Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, when Gradle parses XML files, resolving XML external entities is not disabled. Combined with an Out Of Band XXE attack OOB-XXE, just parsing XML can lead to exfiltration of local tex...
CVE-2023-42445 Possible local file exfiltration by XML External entity injection
Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, when Gradle parses XML files, resolving XML external entities is not disabled. Combined with an Out Of Band XXE attack OOB-XXE, just parsing XML can lead to exfiltration of local tex...