Malicious code in weex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463fb43413f5f55fea549cc0240a5b8e3726099081d9d9379f10c772591d870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fameex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956f7f7dd723546811c75dba7b1b262c4134f53f4ac86ae38350fcb67fa542eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1428 Malicious code in orangex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75dcd0936faaa1ade20abad6c214921354886d0070329789e51d75e0a82c48f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7063c9fcff0127b36c127dedd6b0a9f5ea43bc5ae8534adea55a756413730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digifinex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19cfa1ecb29ae8496e8984153bdd6e045fc0cdc8ac994e67678201fd125220a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-25066

CVE-2024-25066 affects RSA Authentication Manager prior to 8.7 SP2 Patch 1. It enables XML External Entity (XXE) attacks via a license file, allowing attacker-controlled files to be stored on the server. Data exfiltration is not possible. Remediation: upgrade to 8.7 SP2 Patch 1 or later; as a tem...

CVE-2024-25066

RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity XXE attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur...

PT-2025-6627 · Rsa · Emc Rsa Authentication Manager

Name of the Vulnerable Software and Affected Versions: RSA Authentication Manager versions prior to 8.7 SP2 Patch 1 Description: The issue allows XML External Entity XXE attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cann...

CVE-2024-25066

RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity XXE attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur...

RSA Authentication Manager 安全漏洞

RSA Authentication Manager is a secure access and authentication platform from RSA Corporation. A security vulnerability exists in RSA Authentication Manager versions prior to 8.7 SP2 Patch 1, which stems from an XML external entity attack that can be performed via a license file, resulting in an...

CVE-2023-50380

XML External Entity injection in apache ambari versions = 2.7.7, Users are recommended to upgrade to version 2.7.8, which fixes this issue. More Details: Oozie Workflow Scheduler had a vulnerability that allowed for root-level file reading and privilege escalation from low-privilege users. The...

SUSE CVE-2022-48921

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweightentity Syzbot found a GPF in reweightentity. This has been bisected to commit 4ef0c5c6b5ba "kernel/sched: Fix schedfork access an invalid schedtaskgroup" There is a race between schedpostfork and...

The vulnerabilities of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the software for designing, operating, and maintaining technological installations like COMOS, allow attackers to execute XXE attacks.

The vulnerability of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the COMOS software for designing, operating, and maintaining technological installations is related to a bug that restricts XML references to external objects. Exploiting this vulnerability cou...

Malicious code in jbrowse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 718122d6ef307a963a9df00b5272528ab1af438eb21e93463a4fec2fb65e70ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1376 Malicious code in prettyphoto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6977060dff1dfc717c3b009910fb56287bb8073952c6a1ac7f3dff6afcd6065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1225

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225 ywoa WXCallBack Interface XMLParse.java extract xml external entity reference

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225 ywoa WXCallBack Interface XMLParse.java extract xml external entity reference

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225

CVE-2025-1225 affects ywoa (WXCallBack Interface) with the vulnerability in the extract function of XMLParse.java, enabling an XML External Entity (XXE) reference. The issue is exploitable remotely and impacts the extract component within c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java....