MAL-2024-11141 Malicious code in evil-package-for-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a239752739844b809432df8dcc829f77e1a30400c98e4d475d703d3fd7dceb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11136 Malicious code in discord-json-requests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e36715204598c156e07aa9b146c861f5481df2d94c91e92f85569f217fa4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11152 Malicious code in randompathlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c6130d1739fac45df45a04aad9725b130073eb91f6d7801254242cac74edae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11128 Malicious code in agoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8556377fff6ad9dfc3bb12eac1be9583621abe348598c4a9a835c3103eb76089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EasyTax 安全漏洞

EasyTax is a taxpayer tax filing software organized by AG Switzerland. A security vulnerability exists in EasyTax 2023 version 1.2 and earlier, which stems from an XML External Entity XXE vulnerability on multiple platforms, including Windows, Linux, and macOS...

XML Entity Injection Vulnerability in U8Cloud of UFIDA Network Technology Co.

U8cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. UFIDA U8Cloud suffers from an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive...

PT-2024-39386 · Unknown · Easy Tax Client

Name of the Vulnerable Software and Affected Versions: Easy Tax Client Software 2023 versions 1.2 and earlier Description: A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software across multiple platforms, including Windows, Linux, and macOS. Recommendations: For...

XML External Entity (XXE) Injection

HAPI FHIR is vulnerable to XML External Entity XXE Injection. The vulnerability is due to insecure XML parsing by HAPI FHIR, specifically within the XSLT parsing components, which improperly handle external entity references in XML files. It allows attackers to inject malicious XML content, such ...

XML External Entity (XXE)

phpoffice/phpexcel is vulnerable to an XXE XML External Entity. The vulnerability is due to improper parsing of XML data, which allows attackers to inject external entities and potentially access sensitive files or execute malicious code...

MAL-2024-11119 Malicious code in exwx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b49adfe29064d8cd3b5231b88df336858fb6897be7f624b8402782e303c58c31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wxpc2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 442452b5b5132567f4b131cd1df065a333aebb163935095711fb1e3bac96af46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11120 Malicious code in galacticspacebananas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caab1cc3d0cf50b90d40c30a89f239ea365d2a99958ccd92eebd71aac2175183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11031 Malicious code in bruteforcetool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d2db7c9c1264028f32963c02b1f65ffdea78b77eb4b5fe76e8c2989de75764 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11033 Malicious code in dogwiftools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072830cdf24f92d02ea5bb6ca4b9c474b7fa3a234ddfb1b98eaaccbc8cc06842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11034 Malicious code in eacfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af7a2232efa9655a28d7e875a3193e3e516863ec0ca7131bfa51ea1a51e0e734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Liberty

Summary Multiple vulnerabilities were addressed in Financial Transaction Manager 4.0.6.0 iFix4 Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External...

MAL-2024-11028 Malicious code in assetmantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dddd918f13d7e544f8d420513711de48ce49d7c545668b49d312d4054ff4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11026 Malicious code in action-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47502de1954b1ba4d201ac64813edf79362d7f81fb2c28f6802f800d93bc08d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11069 Malicious code in proton-vpn-browser-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79dc03424432718c42f9a66d516ba38f46e70a24459369a48aba07205b744ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11055 Malicious code in nikmodzp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e854e48f3a98a1a2fafd6811da47c041201b2d27e260c9de160912108e4e9620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...