PT-2022-22345 · Jenkins · Jenkins Recipe Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Recipe Plugin versions 1.2 and earlier Description: The issue is related to the configuration of the XML parser, which does not prevent XML external entity XXE attacks. This allows for potential exploitation. Recommendations: For...

The vulnerability of the JDBC driver (PgJDBC) for connecting Java programs to the PostgreSQL database allows attackers to perform XXE attacks.

The vulnerability of the JDBC driver PgJDBC for connecting Java programs to the PostgreSQL database is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...

Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus

CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine A...

CVE-2022-23170

SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environment that uses the Okta SSO integration might be vulnerable. An unauthenticated attacker could exploit the XXE vulnerability by sending a malformed POST request to the identity...

CVE-2022-23170

SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environment that uses the Okta SSO integration might be vulnerable. An unauthenticated attacker could exploit the XXE vulnerability by sending a malformed POST request to the identity...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition XML External Entity Injection Vulnerability

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An XML external entity injection vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which...

MAL-2022-4084 Malicious code in jugnnnnnuuuuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6102e4bb73867605b019f376d784c904f037f40a2a7b52bfb674d2d003561ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in optionalnull (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a63834f408c1ca7f9a64bc026db7fee879b4a8a4462eb35ce4e5c45211349ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axis-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b37aa4f85d6367ab2b0cf75c1ac026183986184763e56b584d5cb4fc019ce4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs-sidebar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205dccdeb1edb92580ab0690e8ca24d862a431a55960aad0a69f0bc7d19ee9d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wise_lena_bot_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d497c45152e7ca1cf17203c6f3d594ab5034b0214fabeacd6a950b065d4c6667 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oz-select-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc244268e31ff162335d149980a9cd27488d212971b485bfe356426e18ec7067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgn-sys/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7fe3693887a0b35be470744969abc99f121ce0eb8036ce3f5eef87d8cf515c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1711 Malicious code in bubujs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0969686fc00c96811af3f108528331e8a27360fc9d13b482c52b2aad1798783f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2434 Malicious code in dependency-from-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e5c03a4db06d5cf53fc442967dfe29dfc02ab2c6526b74ea00b43f1e1a3e76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2p-amount-field (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c708cc5ca0100211486fde89b6f6ed0a2e1bf6458524412d0cf66ab6b5698839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...