MAL-2023-7946 Malicious code in @apex-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4019e99da7923a93919d8a184b8ea6b720e390e1ac8d94deef47992fdcdb238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7948 Malicious code in colors-enviroment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29ac8d849a43df619a8ae11f9774485d716cda8c540cd95729aaf9344e2cf476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2022-48565

An XML External Entity XXE issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities...

MAL-2023-7951 Malicious code in docker-slim-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c43f388e17851e78ffe6cea282489130b04ea50c71f40d951e492b3128f019d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2023:3445-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. bsc1214106 - CVE-2023-3824: Fixed a buffer overflow in phardirread. bsc1214103...

MAL-2023-7938 Malicious code in node-hide-console-windows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa61f9df29f0ec2845ac6191bc7bcf26ddfd4901abd17d21359a4c5c4cd2a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7928 Malicious code in @webquote-ui/iceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8020f294471f2ae9d52d11a800530c0fa88579565b79ab86f36f6d3ea6df93e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Esoteric YamlBeans XML Entity Expansion vulnerability

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

GHSA-VJ49-J7RC-H54F Esoteric YamlBeans XML Entity Expansion vulnerability

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

CVE-2023-24620

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

CVE-2023-24620

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

Design/Logic Flaw

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

MAL-2023-7911 Malicious code in fca-mdong-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aa3fe0ef5d71c1d6ecd9de7850834521703b63c9a7fd9f92cd6f8d9a887f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7912 Malicious code in malfex_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf61c4d8d649d32458d1f89955b492660ca62652ac0c9410d9a9c07a54b3d546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7914 Malicious code in poctesthackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e10f050ce87c2eddfab008bc14c595470ee57d39981deba3bacf86bbd6624ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-24620

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

CVE-2023-24620

Esoteric YamlBeans (1.15 and earlier) contains a YAMLReader XML Entity Expansion vulnerability. A crafted YAML document exploits the YAML Anchor feature, allowing small inputs to expand to large sizes and trigger high CPU/memory usage, including Java OOMs. Connected sources corroborate the issue ...

CVE-2023-24620

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

CVE-2023-24620

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...

CVE-2023-24620

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size,...