5228 matches found
Malicious code in soap-titan-terser-webpack-plugin-betelgeuse (npm)
The package soap-titan-terser-webpack-plugin-betelgeuse was found to contain malicious code...
Malicious code in impulse-resonance-soap-cryonics (npm)
The package impulse-resonance-soap-cryonics was found to contain malicious code...
Malicious code in loopback-connector-soap-elemetal (npm)
The package loopback-connector-soap-elemetal was found to contain malicious code...
Malicious code in dagda-octans-boson-soap (npm)
The package dagda-octans-boson-soap was found to contain malicious code...
Malicious code in achernar-soap-acamar-geomorphology (npm)
The package achernar-soap-acamar-geomorphology was found to contain malicious code...
MAL-2025-33578 Malicious code in soap-titan-terser-webpack-plugin-betelgeuse (npm)
The package soap-titan-terser-webpack-plugin-betelgeuse was found to contain malicious code...
Malicious code in eslint-plugin-restart-vega-soap (npm)
The package eslint-plugin-restart-vega-soap was found to contain malicious code...
Malicious code in json-soap-postcss-tectonic (npm)
The package json-soap-postcss-tectonic was found to contain malicious code...
MAL-2025-23958 Malicious code in json-soap-postcss-tectonic (npm)
The package json-soap-postcss-tectonic was found to contain malicious code...
MAL-2025-17931 Malicious code in dagda-octans-boson-soap (npm)
The package dagda-octans-boson-soap was found to contain malicious code...
MAL-2025-17793 Malicious code in css-loader-quito-soap-ursa (npm)
The package css-loader-quito-soap-ursa was found to contain malicious code...
BIT-LIBPHP-2025-6491 NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server...
BIT-LIBPHP-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure ...
BIT-LIBPHP-2021-21702 Null Dereference in SoapClient
In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...
[SECURITY] Fedora 41 Update: libsoup3-3.6.5-2.fc41
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
[SECURITY] Fedora 42 Update: libsoup3-3.6.5-2.fc42
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
CLSA-2025-1753798945 php: Fix of 3 CVEs
CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...
CLSA-2025-1753793859 php: Fix of 3 CVEs
CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...
CLSA-2025-1753465703 php: Fix of 3 CVEs
CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...
HP OfficeJet Pro Printers Denial of Service (CVE-2023-4694)
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that contains a body but no header. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...