MAL-2022-5633 Malicious code in react-bootcamp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a737b63841f772ce61cad564a6e48553cf536dce3db12b81b99f217d73697832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6441 Malicious code in teamcity-vscode-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781a5dd1bb7862e67510806bbe291457f580ad23f355ce15952e1831cd9753ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stackdriver-pushgateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ced9f87756bed39e7f18172a9b6b7756622f38898cdf15d826d591344b89c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5285 Malicious code in perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3bda53456f97f07496332b3abe3ca16054f9a5b0c18627a3d1427a3f417c2a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-schema-registry-avro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25017be6d6a61569e0ed350140bf9b3dbbe967f00da6fba0b1a4ad7894b80c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1367 Malicious code in azure-purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af96a71e042ed4c11e40a6554339f77f7cdedb3285d5f92f468a995c75073e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mbed-js-simple-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 616edcb5a02bf009ddbb7d38c285d19f01ac70e1bf21e9cb7e7d519db4ff379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oh-my-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e4b827f2db0aa6d95ae246696f5d66665a7017fc655274fc98c6f3e38f78e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-ue-themes-la (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd6b1635c8fd79c366882517043249a5f5f29688531b8a26db7a8cf43a43671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in itsmerobottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05535a64865868032103d2f29b1a3c0ba770470a0f8b421233cc5a84cffadfcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mrg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98790b51597ec490351af9018c107bea0bdce270bb99f317b5d4a2f45b8ddf7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-690 Malicious code in @unibet/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3917bd6297b9608c04f265f4857561d25c6dfc390688ad971e8af3d29b6b04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-355 Malicious code in @impresscms/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aaf5018cdf58393a3c22158c2784504059026f2b4f2a9a9bb374fdcace9fe8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XML External Entity (XXE)

Drools Compiler is vulnerable to xml external entity. The vulnerability exists in validate function in KieModuleMarshaller.java due to incorrect use of Validator class which allows an attacker to submit a malicious XML document to perform requests on behalf of the server...

CVE-2021-45024

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

CVE-2021-45024

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

CVE-2021-45024

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

Xxe

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

CVE-2021-45024

CVE-2021-45024 affects ASG-Zena Cross Platform Server Enterprise Edition 4.2.1. The connected documents describe an XML External Entity (XXE) vulnerability in the XML import handling that can lead to SSRF and data exfiltration via the server (endpoints such as oc_main/zenaweb/scheduler/operation)...

XML External Entity Reference in drools

drools =7.59.x is affected by an XML External Entity XXE vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability...