MAL-2024-7409 Malicious code in @zitterorg/voluptate-aliquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d6d2150694a90ba597cf02d3bdb834a44388c3cff43d4aaeabbb893a45626a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7242 Malicious code in @zitterorg/iste-veritatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 569e0307a27f755c96f481a78811dabb62ecd1697eb60ae5d16b196ebd6a157c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7237 Malicious code in @zitterorg/ipsam-deserunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cab2ccccac6b11faf8865707664b022135deb9ca3fc59c57b7c325ebf43f82c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7369 Malicious code in @zitterorg/repellendus-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c107ede46e319fb0c1f9d0133b1cbe3e2d88caf4c286a24b84b913b5f0663ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7322 Malicious code in @zitterorg/perferendis-aperiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ada3ec39d38fc41130d50c883a8ca0c97c4de7875cf9b79f6a5ba20cccdc627 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7309 Malicious code in @zitterorg/odio-itaque-harum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad4ea98bb35da351db07a43dfb0721a687691bb0995ec319ae615d96ff6e9aaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7331 Malicious code in @zitterorg/praesentium-voluptatum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ae2d233825ca527f6fc480a5820ddf85924743f596f2d8bd08582939d740f81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7229 Malicious code in @zitterorg/in-labore-ratione (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f193c45bf6880affac50644abd21f3b999c372d2ed9092c69d80228fe88aec47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7351 Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7261 Malicious code in @zitterorg/magnam-doloribus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a2c0fe3e29bb3384921b1a0aff2c39c54bae151176af9eb6a3536f1d18006f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7374 Malicious code in @zitterorg/repudiandae-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06241bc57f5320925f66ab1506bc038df088d5600d2540aba83a38d900a0be5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20240704-05

Vulnerability in the OpenSearch software package related to incorrectly restricting reference to an external XML entity. Exploitation of the vulnerability could allow an attacker to conduct XXE attacks...

K000140250: Expat vulnerability CVE-2023-52426

Security Advisory Description libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. CVE-2023-52426 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the...

MAL-2024-7094 Malicious code in auth0-dashboard-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd3d9dcd233e8f88bec84813744dcf3ea68a677d4025fd66d55d2f1190be1b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7096 Malicious code in msa-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ed49b2fd60a4f02b928360047bfd5c5d86159fb1e1b86c27b528a72dda41151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack.(CVE-2024-2235)

Summary IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume...

Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to XML External Entity Injection attack due to IBM WebSphere Application Server Liberty (CVE-2024-22354)

Summary IBM WebSphere Application Server Liberty is shipped with IBM Tivoli Netcool Impact as part of its server infrastructure. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. Vulnerability Details...

MAL-2024-7064 Malicious code in puredocx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2043c68b9e064d9802a7704f5f3429aae0fe87fd4d8f5cfbd9053e21b59036c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7062 Malicious code in check-credit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeaf8d20bbaa95c39cf1458d9aa8469006eee9ab9ef2202bdaf1757873c80468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...