Malicious code in react-toolbox-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 422a604d191acbb8c624bc1ef790995e034a891c2bb65d4fdf729675ed8d4ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-rhancis-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3398b30916ed54737b0f733b7dc0b100065a9059a19ffc24e45ad9690d6d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1019 Malicious code in rhancis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc33fb78ec5c895246ba386fed24b5d490e42c1679729f9fc95c8d004b397b4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1042 Malicious code in yatai-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f548d205122fcfcec01de022463ec287546b7367481a1ec5adb29294e452b8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-480 Malicious code in grabathon-v8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c5d3c773c46d98a52b454f0e11ea84a072863fc1133b5012841efcc9739162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-766 Malicious code in seaport-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7c3daf7c2577a44884df2696c8fc7fbc4329e375acf9565ddb84ee007686ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-541 Malicious code in js-node-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b096038aa13ffe408e446c95499cf94a514d9231887e564f8ddd667f99e0ecf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-935 Malicious code in very-bad-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2289bce399400ee41a568ffb19da6c2728513c5f5a8e3f818532bb7b4978d8ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-ivancotacte1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68b9dd7142d0fb0d52f6afd89beeb1f1ab065b4d13efeff8d7f032862f9f7f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-38490 Kirby XML External Entity (XXE) vulnerability in the XML data handler

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...

CVE-2023-38490 Kirby XML External Entity (XXE) vulnerability in the XML data handler

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...

CVE-2023-38490: Improper Restriction of XML External Entity Reference

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...

MAL-2023-86 Malicious code in akita-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 114fb2289d01453676125580487fd32c170d5de19b49b286ae7b1ce9943135ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-386 Malicious code in fca-chat-zach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7412bfa443afe9140f4865df0e0422e75243e8dce896fe7011126f77567f4001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-32639

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

CVE-2023-32639

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

CVE-2023-32639

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

CVE-2023-32639

CVE-2023-32639 affects the Ministry of Justice’s Applicant Programme, specifically versions 7.06 and earlier . The root cause is improper restriction of XML External Entity (XXE) references , allowing processing of a crafted XML file to read arbitrary files on the system. Impact is high confident...

Improper restriction of XML external entity references (XXE) in Applicant Programme

Overview Applicant Programme provided by The Ministry of Justice improperly restricts XML external entity references XXE CWE-611. Toyama Taku and Sakaki Ryutaro of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

The Ministry of Justice Applicant Programme 代码问题漏洞

The Ministry of Justice Applicant Programme is a Department of Justice applicant programme application organized by The Ministry of Justice. A security vulnerability exists in Applicant Programme V7.06 and prior versions, which stems from an improper restriction of XML external entity references,...