CVE-2022-46751 Apache Ivy: XML External Entity vulnerability in Apache Ivy

Improper Restriction of XML External Entity Reference, XML Injection aka Blind XPath Injection vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy...

CVE-2022-46751

Improper Restriction of XML External Entity Reference, XML Injection aka Blind XPath Injection vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy...

MAL-2023-1509 Malicious code in @lg-private/mongo-nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cfb13dbbdcd525742b9cca74fa4bac901e7a3e1601a9dba4e97986336210dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in as-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a907d0f630e8178cb7ba1215d44dac15d4d698d71e40733cb66932ff43419de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1519 Malicious code in fca-nayan-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6229ad92059ca644e750ce9b89d4fd436a61e8b1896016cf4bf18a5f0ac4c68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1515 Malicious code in crcloud-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2872c6473427534afbbcbe64c7af6c4d0ec7259992ce2122f13e14a6e6f20c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1526 Malicious code in urs-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32d0470f35ccd55fb33289039a2265e1aae264f539cc0358f9f21b3557d5ec5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1524 Malicious code in test-dr-pkg-001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d511e9d40183359a36594e6f9c61d50195d8e1686197d6e9aded6ba780e8fda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1529 Malicious code in usaa-page-transition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f294cfe073939b35b3fbbbaf04226a2d2b42eb889c8efc7fe305df01cef811cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1517 Malicious code in ent-disclosure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fc8ed92b0d19f6d8082cc449fa37e01fb55a55f8391167d18189353b85b9f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1523 Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1512 Malicious code in browserslist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08f5ede6b0f56a4b6366c22c4622d7cddc43a2d689f021f8a179e72c2fa6220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-46751: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference, XML Injection aka Blind XPath Injection vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy...

Use After Free

libqpdf.so is vulnerable to Use After Free. The vulnerability exists due to a lack of entity value validations in the libqpdf parameter of PlAESPDF.cc. An attacker could exploit arbitrary code into the system...

MAL-2023-1486 Malicious code in inf-build-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 033fc49e1c2258614dc2c2a1b849039e2cea7095fb6f4a4b95ccb8bde9955df0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-8841 · Apache +1 · Apache Ivy +1

Name of the Vulnerable Software and Affected Versions: Apache Ivy versions prior to 2.5.2 Description: The issue is related to improper restriction of XML external entity references, which can lead to XML injection, also known as blind XPath injection. When Apache Ivy parses XML files, it allows...

Applying Data Ontology Concepts to Protect Data

Data breaches continue to be the thorn for most organizations despite the sophisticated and innovative cybersecurity tools that are used to stop what is now the inevitable cost of doing business in a hyperconnected world. In this blog post, I’ll explain how organizations can increase the...

MAL-2023-1478 Malicious code in nayan-remake-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d070e4a8383eabce1345f021b7af456ece14dd4d4d01ea727e2b528f2fd68227 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1477 Malicious code in miro-api-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 787331785bd7ba05994172e4c86d95681d3e2e53caf8660a6832eed760fbfb68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tianfengqwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6f7db121452a5fc346f93dedc863aa336e3aaa04145c00616f4e237f003f93f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...