Malicious code in p2pb2b-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7063c9fcff0127b36c127dedd6b0a9f5ea43bc5ae8534adea55a756413730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digifinex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19cfa1ecb29ae8496e8984153bdd6e045fc0cdc8ac994e67678201fd125220a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-25066

CVE-2024-25066 affects RSA Authentication Manager prior to 8.7 SP2 Patch 1. It enables XML External Entity (XXE) attacks via a license file, allowing attacker-controlled files to be stored on the server. Data exfiltration is not possible. Remediation: upgrade to 8.7 SP2 Patch 1 or later; as a tem...

CVE-2024-25066

RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity XXE attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur...

CVE-2024-25066

RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity XXE attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur...

PT-2025-6627 · Rsa · Emc Rsa Authentication Manager

Name of the Vulnerable Software and Affected Versions: RSA Authentication Manager versions prior to 8.7 SP2 Patch 1 Description: The issue allows XML External Entity XXE attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cann...

RSA Authentication Manager 安全漏洞

RSA Authentication Manager is a secure access and authentication platform from RSA Corporation. A security vulnerability exists in RSA Authentication Manager versions prior to 8.7 SP2 Patch 1, which stems from an XML external entity attack that can be performed via a license file, resulting in an...

CVE-2023-50380

XML External Entity injection in apache ambari versions = 2.7.7, Users are recommended to upgrade to version 2.7.8, which fixes this issue. More Details: Oozie Workflow Scheduler had a vulnerability that allowed for root-level file reading and privilege escalation from low-privilege users. The...

SUSE CVE-2022-48921

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweightentity Syzbot found a GPF in reweightentity. This has been bisected to commit 4ef0c5c6b5ba "kernel/sched: Fix schedfork access an invalid schedtaskgroup" There is a race between schedpostfork and...

The vulnerabilities of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the software for designing, operating, and maintaining technological installations like COMOS, allow attackers to execute XXE attacks.

The vulnerability of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the COMOS software for designing, operating, and maintaining technological installations is related to a bug that restricts XML references to external objects. Exploiting this vulnerability cou...

Malicious code in jbrowse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 718122d6ef307a963a9df00b5272528ab1af438eb21e93463a4fec2fb65e70ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1376 Malicious code in prettyphoto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6977060dff1dfc717c3b009910fb56287bb8073952c6a1ac7f3dff6afcd6065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1225

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225 ywoa WXCallBack Interface XMLParse.java extract xml external entity reference

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225 ywoa WXCallBack Interface XMLParse.java extract xml external entity reference

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity...

CVE-2025-1225

CVE-2025-1225 affects ywoa (WXCallBack Interface) with the vulnerability in the extract function of XMLParse.java, enabling an XML External Entity (XXE) reference. The issue is exploitable remotely and impacts the extract component within c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java....

ywoa 代码问题漏洞

ywoa is an OA collaborative office system by the Chinese bestfeng individual developer. A code issue vulnerability exists in ywoa version 2024.07.03 and earlier versions, which originates from the extract function of the WXCallBack Interface component's...

PT-2025-6861 · Ywoa · Ywoa

Name of the Vulnerable Software and Affected Versions: ywoa versions 2024.07.03 and earlier Description: A problematic issue has been found in the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads t...

XML External Entity (XXE)

xml2rfc is vulnerable to XML External Entity XXE. The vulnerability is due to improper enforcement of the --allow-local-file-access flag, allowing XML entity references to access local files within the source directory, leading to potential information disclosure...