18683 matches found
Malicious code in sdkss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f46cdba3fb83ff72cb7127859fb5140d6fc6f8ed207f45919c5c64bc494f3097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in karansinghshergill (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d4793c012f03cb8335fa90470eac0ff4d868655a7f3c785d62ffb09b38bf8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in neodium (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e6859d3022b758670d5c459846ac12039cacc27e7895501ba5544e3e3ecdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in selfbott-rpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 860baf78f0f4f83405dc224345b0d30845128219a809a6e76e89c17493419fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Eclipse JGit 代码问题漏洞
Eclipse JGit is an open source Java implementation of the Eclipse Foundation for handling the Git version control system. A security vulnerability exists in Eclipse JGit 7.2.0.202503040940-r and prior versions, which stems from an XML external entity attack when parsing XML files, which could lea...
AlmaLinux 9 : expat (ALSA-2025:7444)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7444 advisory. libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 Tenable has extracted the preceding description block directly from t...
Security Bulletin: IBM Security QRadar EDR Software has multiple vulnerabilities (CVE-2024-45641, CVE-2023-33861)
Summary IBM Security QRadar EDR Software is affected by multiple vulnerabilities that could allow a remote attacker to bypass security restrictions or spoof a trusted entity. These vulnerabilities have been addressed in the latest update. Vulnerability Details CVEID:CVE-2024-45641 DESCRIPTION: IB...
CVE-2023-33861
IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client...
CVE-2023-33861
IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client...
CVE-2023-33861
CVE-2023-33861 affects IBM Security QRadar EDR 3.12. The vulnerability allows an attacker to spoof a trusted entity by interfering with the communication path between the host and client, related to trust management/improper certificate handling. The Red Hat/IBM security entries and the IBM bulle...
CVE-2023-33861 IBM Security ReaQta improper certificate validation
IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client...
IBM Security ReaQta EDR 信任管理问题漏洞
IBM Security ReaQta EDR is an Endpoint Detection and Response EDR solution from International Business Machines IBM that detects, investigates and responds to endpoint threats in real time through behavioral analytics and AI technologies, providing automated threat hunting and incident response...
Astra Linux - уязвимость в firefox, thunderbird
libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...
Malicious code in secure-data-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4c358b5a571c99b8b2f4b94a39729183ea9d5498e9407722a73f366bacd2b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
XML External Entity (XXE)
io.github.bonigarcia, webdrivermanager is vulnerable to XML External Entity XXE. The vulnerability is due to insufficient restrictions on XML parsers, allowing external entity expansion "Billion Laughs" attack that can lead to Denial of Service...
VulnCheck KEV: CVE-2025-2775
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives...
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2025-1478)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in sforce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1006bbc6c749967a658f4450e8557dbe5aec05fcc5d4ef9a9d8fba16bbb0ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-4641
Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux XML parsing components modules allows Data Serialization External Entities Blowup. This vulnerability is associated with program files...