CVE-2024-9044: Improper Restriction of XML External Entity Reference

A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...

XML Entity Injection Vulnerability in U8Cloud of UFIDA Network Technology Co.

U8cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. UFIDA U8Cloud suffers from an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive...

PT-2024-39386 · Unknown · Easy Tax Client

Name of the Vulnerable Software and Affected Versions: Easy Tax Client Software 2023 versions 1.2 and earlier Description: A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software across multiple platforms, including Windows, Linux, and macOS. Recommendations: For...

XML External Entity (XXE) Injection

HAPI FHIR is vulnerable to XML External Entity XXE Injection. The vulnerability is due to insecure XML parsing by HAPI FHIR, specifically within the XSLT parsing components, which improperly handle external entity references in XML files. It allows attackers to inject malicious XML content, such ...

XML External Entity (XXE)

phpoffice/phpexcel is vulnerable to an XXE XML External Entity. The vulnerability is due to improper parsing of XML data, which allows attackers to inject external entities and potentially access sensitive files or execute malicious code...

MAL-2024-11119 Malicious code in exwx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b49adfe29064d8cd3b5231b88df336858fb6897be7f624b8402782e303c58c31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wxpc2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 442452b5b5132567f4b131cd1df065a333aebb163935095711fb1e3bac96af46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11120 Malicious code in galacticspacebananas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caab1cc3d0cf50b90d40c30a89f239ea365d2a99958ccd92eebd71aac2175183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11031 Malicious code in bruteforcetool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d2db7c9c1264028f32963c02b1f65ffdea78b77eb4b5fe76e8c2989de75764 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11033 Malicious code in dogwiftools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072830cdf24f92d02ea5bb6ca4b9c474b7fa3a234ddfb1b98eaaccbc8cc06842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11034 Malicious code in eacfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af7a2232efa9655a28d7e875a3193e3e516863ec0ca7131bfa51ea1a51e0e734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Liberty

Summary Multiple vulnerabilities were addressed in Financial Transaction Manager 4.0.6.0 iFix4 Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External...

MAL-2024-11028 Malicious code in assetmantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dddd918f13d7e544f8d420513711de48ce49d7c545668b49d312d4054ff4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11026 Malicious code in action-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47502de1954b1ba4d201ac64813edf79362d7f81fb2c28f6802f800d93bc08d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11069 Malicious code in proton-vpn-browser-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79dc03424432718c42f9a66d516ba38f46e70a24459369a48aba07205b744ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11055 Malicious code in nikmodzp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e854e48f3a98a1a2fafd6811da47c041201b2d27e260c9de160912108e4e9620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11105 Malicious code in ssc-ui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11098 Malicious code in soybean-admin-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 074138690c6a5d6116a3c95a8c03d5436314502580eb4f3858a6a4041b287e34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rtn-centered-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c2f20177c95333172f2abb0596c37a5b6c2a294dcd40dda5a0608b6f83778b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11082 Malicious code in rtn-centered-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c2f20177c95333172f2abb0596c37a5b6c2a294dcd40dda5a0608b6f83778b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...