defusedxml

This is a Python library called defusedxml, which is designed to prevent XML bomb denial of service DoS vulnerabilities. The library provides a facade for the standard library's xml.etree.ElementTree module, which is vulnerable to XML bombs. The defusedxml library defuses XML bombs by preventing...

CVE-2025-41040

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datacode', 'datalang0key', 'datalang0value', 'datalang1key' and 'datatitle' parameters in /apprain/developer/language/lipsum.xm...

php-saml

This is a PHP SAML toolkit for adding SAML support to PHP software. It is a library provided and supported by OneLogin Inc. The library is compatible with PHP versions greater than 7.1. The library includes features such as: Support for SAML 2.0 Support for SAML 1.1 Support for SAML 1.0 Support f...

defusedxml

This is a Python library called defusedxml, which is designed to prevent XML bomb denial of service DoS vulnerabilities. The library provides a facade for the xml.etree.ElementTree module, which is a built-in Python module for parsing and creating XML documents. The library is maintained by...

VulnCheck KEV: CVE-2025-54125

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can b...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-32415 DESCRIPTION: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploi...

Malicious code in xml-juno-changelog-hyperion (npm)

The package xml-juno-changelog-hyperion was found to contain malicious code...

Malicious code in wind-decode-serialize-balance-xml (npm)

The package wind-decode-serialize-balance-xml was found to contain malicious code...

Malicious code in polaris-node-config-graphql-xml (npm)

The package polaris-node-config-graphql-xml was found to contain malicious code...

MAL-2025-46737 Malicious code in xml-juno-changelog-hyperion (npm)

The package xml-juno-changelog-hyperion was found to contain malicious code...

MAL-2025-45575 Malicious code in polaris-node-config-graphql-xml (npm)

The package polaris-node-config-graphql-xml was found to contain malicious code...

Malicious code in xml-epsilon-double-emulate-spy (npm)

The package xml-epsilon-double-emulate-spy was found to contain malicious code...

Malicious code in convict-betelgeuse-archaeoastronomy-xml (npm)

The package convict-betelgeuse-archaeoastronomy-xml was found to contain malicious code...

MAL-2025-46736 Malicious code in xml-epsilon-double-emulate-spy (npm)

The package xml-epsilon-double-emulate-spy was found to contain malicious code...

MAL-2025-46637 Malicious code in wind-decode-serialize-balance-xml (npm)

The package wind-decode-serialize-balance-xml was found to contain malicious code...

Malicious code in tachyon-vulcan-callisto-xml (npm)

The package tachyon-vulcan-callisto-xml was found to contain malicious code...

MAL-2025-46615 Malicious code in whitedwarf-xml-phoebe-quantum-computing (npm)

The package whitedwarf-xml-phoebe-quantum-computing was found to contain malicious code...

MAL-2025-46190 Malicious code in tachyon-vulcan-callisto-xml (npm)

The package tachyon-vulcan-callisto-xml was found to contain malicious code...

MAL-2025-43888 Malicious code in convict-betelgeuse-archaeoastronomy-xml (npm)

The package convict-betelgeuse-archaeoastronomy-xml was found to contain malicious code...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : Ruby vulnerabilities (USN-7734-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7734-1 advisory. It was discovered that Ruby incorrectly handled certain IO stream methods. A remote attacker could use this...