CVE-2023-27554: Improper Restriction of XML External Entity Reference

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185...

Vulnerability fixed in IBM Websphere

IBM has fixed a vulnerability in Websphere Application Server. A malicious party could exploit the vulnerability to launch an XML External Entity attack. By serving a rogue XML file, the malicious party can cause a denial-of-service cause, or potentially gain access to sensitive information. IBM...

PT-2023-2941 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consu...

IBM WebSphere Application Server code-related vulnerabilities

IBM WebSphere Application Server is an application server product. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An entity injection vulnerability exists in IBM WebSphere Application Server. The vulnerability is du...

MAL-2023-123 Malicious code in becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yoursel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2208fd1d29f35f1fe83fe7c0a7a30f398ce914f799fed6a37b0e1eef3bf74dd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-122 Malicious code in beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7faa105f44cbe37ad6640900de81ba2fd9b8d8a89555a095bee8fc30a934e3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-139 Malicious code in born-to-win-find-your-success-by-zig-ziglar-on-iphone-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2310dcf104d337b53aa70287812ce0bdc9c1ab5d0f2f198c79a3ac4566a20da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-125 Malicious code in beginners-luck-chance-of-a-lifetime-1-by-kate-clayborn-on-audible-full-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b8af78e063a3eea87c988c08ae5a0166b585ad49b67dfa8f1546bb2096daa29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-273 Malicious code in dow-load-beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4161121513299effb824bf412303706acdc626a584e6417c3e759d977ba5b2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-206 Malicious code in conversations-with-friends-by-sally-rooney-on-audible-new-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43a3c0ad8210a979fccfd7f614cae9493219922b5e13d2a02d9a84a2beda365d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-280 Malicious code in dow-load-the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe34371c86eb25d33028fc43131c1b1b281f7e57986816c88163b17125302b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-138 Malicious code in born-of-water-elemental-origins-1-by-al-knorr-online-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13ed688a98ceec7189e73832c965d435ff1c7495d8acb4df863273d491b6a74a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-245 Malicious code in designer-relationships-a-guide-to-happy-monogamy-positive-polyamory-and-optimistic-open-relationship (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fead2d10a8030f59632981c85f922b207a5f18b86fa7f92dce82b68cf925beae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-274 Malicious code in dow-load-becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-whil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92cf782e425254e89048eca9c2e7b572c71ee3d117f3f3067078d5dbf33bbcdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-439 Malicious code in fierce-obsessions-the-phoenix-pack-6-by-suzanne-wright-online-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d309b64e65ce538e138c50c84a995d8c8015ab61d9affd4cffdc92a79d71738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-501 Malicious code in hit-makers-the-science-of-popularity-in-an-age-of-distraction-by-derek-thompson-on-ipad-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 076db454192ff726a44259a97efbfa7696d32887045af6be417937ffc98f5537 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-608 Malicious code in most-of-all-you-a-love-story-by-mia-sheridan-on-audible-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c4a6b517453939c6726b561eb2db29c64d194a0363b67ffc3cba22564b4fb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-75 Malicious code in a-love-letter-to-whiskey-by-kandi-steiner-on-iphone-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3543696adf399ee2a47ce791064b54f73b62253d59a299dd04ffd2cb1decae26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-816 Malicious code in stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4cf640f96f10961f05d0b92040c27c3ddac884865e0fc98755cc84eab11ada Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-865 Malicious code in the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c217d4c0500cd572578b3d4c2668c30df765a44d665c8eaef5b3906c09ce73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...