CVE-2024-6893: Improper Restriction of XML External Entity Reference

The "soapcgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources...

Malicious code in iva-react-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94e079d8c7b731da869ff846e164d4a9c87faed0108d764e4048bde129a25f17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7942 Malicious code in click-action-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863f4bd9c81749474f2360ad027e111369d13c2c699078f5ae2311e627b0d2fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in egds-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0231fabb2b10a136d8f6c28e1c1f5c2ccd55a8a88a202c3ad5061b319bf1c465 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rewards-mfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ae777e44ee20450239b36c3e7d5c2a326fbe7d4e42615a39ae120cc799e963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in statements-mfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0f06ad7cff63b976441d91077ce40bfa62f562f842d073b28612a6397211973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wistia_namespace.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37411af0efaa1331025c7ba0aaa00b729cc7b5eb9425392726c6f2c7de602179 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7958 Malicious code in frontend-static-props-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3f52abf232df0db4fc9cbe55d6234cff445cff215bbeb3e5a26a4f26b843a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7935 Malicious code in bankrate-iconographyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d00e59c6535155e2b679c43788644b735299b33970efa0999a702f82ec203f19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7928 Malicious code in asdfasdfasdfsdfasfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e4dffa094d1dc89af4f9dbc3ba42018c27424cc9ef4186cf0edb5c860e05eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7950 Malicious code in dx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71179e532e0a9ad66fcf86c05453073081f7e77c7ffc4846697e843fe2ba1ac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7967 Malicious code in kaleido-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d5af1457894ebaf8d8c44e57ae9046b4dc0e1183783bb191bb3123a0ed2fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7984 Malicious code in rewards-mfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ae777e44ee20450239b36c3e7d5c2a326fbe7d4e42615a39ae120cc799e963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dx-virtual-assistent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b41db1f1208b92ea920b51ff3e83bf1718e6d1e551159eb752a0325961c9fd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8002 Malicious code in uitk-react-scrollable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15932e6247991a719ff0f98bbb3b9d13ffa6458ac4bce5835a7a691f8b52a6e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7990 Malicious code in taap-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f930b144bfeff9ae5cad20835a228bc2a413884c7a07d9fc5a6b6df8554d17f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7933 Malicious code in bankrate-iconographyasda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ef6b634de3e8692900022debf53cd6ff671c880bde3b47b14eb1be227be5fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8001 Malicious code in uitk-react-experimental-button-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d35a0704d9415d237418973ea82b6c991e02af5b2381fc696268805ff39a30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7927 Malicious code in ampersend-mymove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68f91f3919727e3175e15cbeaa1078a642bb1ed31368c7a8e6cb29c88af407cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7936 Malicious code in bankrate-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 857d78d4a0691e2714e3c43f0001af9777c66644e48d145cc3ef19976a4feb07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...