CVE-2022-23170

SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environment that uses the Okta SSO integration might be vulnerable. An unauthenticated attacker could exploit the XXE vulnerability by sending a malformed POST request to the identity...

CVE-2022-23170

SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environment that uses the Okta SSO integration might be vulnerable. An unauthenticated attacker could exploit the XXE vulnerability by sending a malformed POST request to the identity...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition XML External Entity Injection Vulnerability

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An XML external entity injection vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which...

MAL-2022-4084 Malicious code in jugnnnnnuuuuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6102e4bb73867605b019f376d784c904f037f40a2a7b52bfb674d2d003561ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in optionalnull (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a63834f408c1ca7f9a64bc026db7fee879b4a8a4462eb35ce4e5c45211349ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axis-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b37aa4f85d6367ab2b0cf75c1ac026183986184763e56b584d5cb4fc019ce4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs-sidebar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205dccdeb1edb92580ab0690e8ca24d862a431a55960aad0a69f0bc7d19ee9d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wise_lena_bot_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d497c45152e7ca1cf17203c6f3d594ab5034b0214fabeacd6a950b065d4c6667 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oz-select-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc244268e31ff162335d149980a9cd27488d212971b485bfe356426e18ec7067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgn-sys/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7fe3693887a0b35be470744969abc99f121ce0eb8036ce3f5eef87d8cf515c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1711 Malicious code in bubujs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0969686fc00c96811af3f108528331e8a27360fc9d13b482c52b2aad1798783f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2434 Malicious code in dependency-from-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e5c03a4db06d5cf53fc442967dfe29dfc02ab2c6526b74ea00b43f1e1a3e76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2p-amount-field (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c708cc5ca0100211486fde89b6f6ed0a2e1bf6458524412d0cf66ab6b5698839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1518 Malicious code in bfx-facs-db-better-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d016f9a80da00727a4ac31dcc7daed488a4d52c73c76b444cecdaa5538f0b100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1547 Malicious code in bfx-report-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a238f9ce326ef4fdbe1d22083d84c83f7d4f7bf14f0d383bf7e17e24e643f10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-ws2-api-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4aa321103468bc42d52655217679df5a46958d2714780f7f4443659ed50d457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...