CVE-2024-9044

CVE-2024-9044 describes an XML External Entity (XXE) vulnerability in Easy Tax Client Software 2023 version 1.2 and earlier, across Windows, Linux, and macOS. The linked PT-2024-39386 entry confirms the affected software and notes a workaround: disable XML parsing until a patch is available; no f...

CVE-2024-9044 XML External Entity (XXE) Vulnerability in EasyTax

A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...

CVE-2024-9044 XML External Entity (XXE) Vulnerability in EasyTax

A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...

Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11142 Malicious code in flutter-angular-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11155 Malicious code in safeness-sb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d558c870d1afa6f183ac52e8fe21ea328ac4e688f64dd389d3a1b4e98f0a93f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11129 Malicious code in all-dl-404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in citiycar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af41f2b48bf5f5bcb57331c00230285bf5d8e9edaee69e799f5b5bb5bfc14efa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in enimoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2cedad1fadd21b7b6c99f0def9324690726c81d00f809f1b4dd05bb31c9f655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11145 Malicious code in n-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cbdc296029075a31aced0f56b22ed1082a7c6c0b9d80d0ed9ab47cb033d467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11132 Malicious code in crypto-bignumber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb07bdcd8a1158c33a46eefd3724fe1ec53b7ed6c4cba581fdda9deb084c0af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11150 Malicious code in notworking-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da772f6092546f23222b6903ba819da287d6088d1a5e448aefbd364e65498413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in distdiscord-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b003b8e11ce73b0dd1259da43ba682eb4a34b0ac0d4b48559af5bc6489c216be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11138 Malicious code in distdiscord-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b003b8e11ce73b0dd1259da43ba682eb4a34b0ac0d4b48559af5bc6489c216be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11141 Malicious code in evil-package-for-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a239752739844b809432df8dcc829f77e1a30400c98e4d475d703d3fd7dceb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11136 Malicious code in discord-json-requests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e36715204598c156e07aa9b146c861f5481df2d94c91e92f85569f217fa4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11152 Malicious code in randompathlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c6130d1739fac45df45a04aad9725b130073eb91f6d7801254242cac74edae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11128 Malicious code in agoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8556377fff6ad9dfc3bb12eac1be9583621abe348598c4a9a835c3103eb76089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EasyTax 安全漏洞

EasyTax is a taxpayer tax filing software organized by AG Switzerland. A security vulnerability exists in EasyTax 2023 version 1.2 and earlier, which stems from an XML External Entity XXE vulnerability on multiple platforms, including Windows, Linux, and macOS...

CVE-2024-52800: Improper Restriction of XML External Entity Reference

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. This doesn't affect the standard validation and policy checks functionality...