CVE-2023-4554

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files. AppBuilder's XML processor is vulnerable to XML External Entity Processing XXE, allowing an authenticated user to upload specially...

CVE-2023-4554 XML External Entity (XXE) Processing

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files. AppBuilder's XML processor is vulnerable to XML External Entity Processing XXE, allowing an authenticated user to upload specially...

MAL-2024-945 Malicious code in wlwz-2312-2nd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882cba6a3732f5a8d767cbf8721517b4495dcef6f36d8b7caeca1a565ff8b00b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-936 Malicious code in jewishapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19d1435255a826e73cab7760affeac8c2af279590c96b3b7470abe0630f4c1dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o2-ionic-image-loader-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-938 Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-934 Malicious code in iifl_ios_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87649558fc7b693ec6cc0ca38419068e0fce94a2f6a6eeb5d01dad7674980357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OpenText AppBuilder Code Issue Vulnerability

OpenText AppBuilder is an application from OpenText Canada. A security vulnerability exists in OpenText AppBuilder versions 21.2 through 23.2, which originates from XML External Entity Injection and allows server-side requests to forge, probe system files...

[SECURITY] [DLA 3723-1] libspreadsheet-parsexlsx-perl security update

Debian LTS Advisory DLA-3723-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 27, 2024 https://wiki.debian.org/LTS Package : libspreadsheet-parsexlsx-perl Version : 0.27-2+deb10u1 CVE ID : CVE-2024-22368 CVE-2024-23525 Debian Bug : 1061098 Security...

PT-2024-40759 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include the crash state with functions such as dwg free common entity data, dwg free...

libxml2: dict corruption caused by entity reference cycles

A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted resulting in logic errors, including memory errors like double free...

expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

XML External Entity (XXE)

Spreadsheet::ParseXLSX is vulnerable to XML External Entity XXE. The vulnerability is caused due to neglecting noxxe option of XML::Twig. This can be exploited to compromise Confidentiality of the system...

MAL-2024-165 Malicious code in distube-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ac3f289f159fa4961391d20b8dbb4b10a0467ac4654073bcc0aa7863caf8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cdf7577c7f14a65c7696c0bf599db4d39ca3a25ddd8ad778f9c44e6391ea64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbc0976e1337a3efa48a52f77fdef02a7087dc45ceae46bbf74c460027671342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7360cb70a37acefe9bafaf2f5ddce7d1cbb4fd9810f217ee6c5ba4aaf3727a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-870 Malicious code in wlwz-2312-7707 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4627eb83d8f5670a2c27f6b9a4b6fc46351f1955473f267ebe81684c1e777d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dbd8240849571c0511de2015396a1f8ab92982d71a683246250e3124fdfa0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-908 Malicious code in wlwz-2312-8109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b142a0f7e3a073d733c5173f30071ba189294b64eff717882b0679e6226560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...