Malicious code in dash_cam_viewer_serial_107_c3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04e5ee2fdf2ae08e390b842fe8c24fe2bc3f0152496de84694bc95ccbcde01b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-639 Malicious code in noor_ul_iman_tarjuma_quran_pdf_free_free__kv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c6edd2df35820cb6c1d38a3fe06c9c836fe349e1aaacbc55af1a13620d4a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-76 Malicious code in a2kj4izep_88z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3377e17a88950e7ff010ea337ec3d6d58a79728d83aaf3b4aa16b3726d0892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-595 Malicious code in milica_jakovljevic_mala_supruga_pdf__verified___flo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 294a601080772367f9c71dcaadd60bfeec9ea23faadf2a35e1f8b3fc4acc962a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-687 Malicious code in poker_clock_professional_22_better_crack_h8z6f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d6822ba68ebf81c5841ac4bbc54ee01cb10d686b967ce796f11bd7fb993d79b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-2955 · Unknown · Opc Factory Server

Name of the Vulnerable Software and Affected Versions: OPC Factory Server affected versions not specified Description: The issue is related to improper restriction of XML external entity references, which could allow a remote attacker to gain unauthorized read access to the file system. This can...

Exploit for XML Entity Expansion in Cisco Secure_Endpoint

CVE-2023-20052 CVE-2023-20052, information leak vulnerability...

Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar

Summary Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar. Hence poi-ooxml-3.9.jar upgraded to poi-ooxml-4.0.jar to fix vulnerabilities. Vulnerability Details CVEID:CVE-2017-5644 DESCRIPTION: Apache POI is vulnerable to a denial of service, cause by an XML External...

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

Summary Security vulnerabilities have been addressed in IBM Cognos Analytics 11.1.7 Fix Pack 7. These vulnerabilities have also been previously addressed in IBM Cognos Analytics 11.2.4 and 11.2.4 FP1. IBM WebSphere Liberty used in IBM Cognos Analytics is vulnerable to an HTTP Header Injection...

MAL-2023-453 Malicious code in font-forno (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71a5b24a13fdcf033190873535da22c0b00d1200f4ea936fbaa8a0883a1b6ce3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

codehaus-plexus: XML External Entity (XXE) Injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

MAL-2023-760 Malicious code in santander-portal-node-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1fb57cea3e1f21e52c22b2fb33191996e04c3aef96c7b9cf1fc6184b6d0883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-610 Malicious code in music-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01508d334e0bbe8458f00ca13978e861399e796f527f528b23fd9bbcd55000c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Amazon Linux AMI : libxml2 (ALAS-2023-1743)

The version of libxml2 installed on the remote host is prior to 2.9.1-6.6.42. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1743 advisory. parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the...

ManageEngine AssetExplorer < 6.9 Build 6989 XXE

An XML external entity XXE vulnerability exists in ManageEngine AssetExplorer 6.9 Build 6980 through Build 6988. A threat actor with the SDAdmin role can configure a malicious server to return a response with a malformed XML using the Reports integration API, causing an XML External Entity XXE...

ManageEngine ServiceDesk Plus MSP < 14.2 Build 14200 XXE

An XML external entity vulnerability exists in ManageEngine ServiceDesk Plus MSP prior to 14.2 Build 14200. A threat actor with the SDAdmin role can configure a malicious server to return a response with a malformed XML using the Reports integration API, causing an XML External Entity XXE attack...

Medium: libxml2

Issue Overview: parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name. CVE-2017-16931 GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Liquibase

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Liquibase. Vulnerability Details CVEID:CVE-2022-0839 DESCRIPTION: Liquibase is vulnerable to XML external entity processing, caused by improper validation of user-supplied input by the...

MAL-2023-144 Malicious code in brightening (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93f608a64371ba824fe1a9cb149fcb84fb28888dc3e8aa8c5aef1f5bf6e2a83f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1168 Malicious code in editor-layer-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27267283420f53586172a7d6b227c424aeb92e63c242a01287112a092a7247a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...