XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients...

PT-2024-35091 · Hapi Fhir · Hapi Fhir

Name of the Vulnerable Software and Affected Versions: HAPI FHIR versions prior to 6.4.0 Description: The XSLT parsing performed by various components in HAPI FHIR is vulnerable to XML external entity injections. This issue can be exploited by submitting a malicious XML file with a DTD tag,...

HAPI FHIR 代码问题漏洞

HAPI FHIR is a Java-written HL7 FHIR API for the HAPI FHIR open source. A code issue vulnerability exists in HAPI FHIR prior to version 6.4.0 that stems from the XSLT parsing performed by various components being vulnerable to XML external entity injection...

ZOHO ManageEngine SharePoint Manager Plus 安全漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. It helps you manage, audit, and report on your local and Office 365 SharePoint environments. It also allows you to monitor, track and analyze all activities in your SharePoint infrastructure t...

EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-2827)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time.CVE-2023-52426 An issue was discovered in libexp...

Malicious code in 1234wdzwkcsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24a9740048ac983c055f06c0c70ef23cd9654f1afc41a6b809febf6ea84f4aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection due to the improper handling of XML input. An attacker can exfiltrate sensitive data or cause denial of service. Details XXE Injection is a type of attack against an application that parses XML input. X...

GHSA-3M9X-2QFJ-XVQ4 PHPExcel XXE Vulnerability

PHPExcel XXE Vulnerability...

MAL-2024-10518 Malicious code in pupeteer-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ea59565248acb2e873bcb80f4dadc33d758a46e16fb70d3a5ae53d30f81cf54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupeteer-firefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e78ebba47b9530f5cec2807eb9cb483e2213f561b35165dbd964249a4814516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupeteer-capture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 021121bee5e4389860a59c8fe51ff445ba8a266672fc246bdb5eff63d96d1c5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteerscroll-down (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef54ed97acfe5ef98e20301d2c06ccf2391055cb225e5c1cc48bc06950e82d6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10522 Malicious code in puppeterfirefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d8862ce6e00754c11e1aed862512e4c262443896518351c4e86f5773be1199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10498 Malicious code in client-req-scopes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b46412fce5fe330212b43b8bb638bc55056c4d72aee91074e21429f921e46232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10513 Malicious code in lavora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707162c11004cd37c42afb9285c941fad905c97a1354411a3e02b1c86a2d3727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10523 Malicious code in shoot-gk24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0950a3a90a94f8ce6e8749818a013883122422bd6416a7a25861d64a56d07b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10526 Malicious code in valomemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c766f5074a741d52acff64d70b735707af99e18eff8bd842be0d39ab5f138c0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10504 Malicious code in eth-namehash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d452768b56606d477eca9809571e5b58bd741bf13fd144d6f510d114cf030ad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-toekn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b34b72b8ff8d01e0d648851125a64aec37c620314f8895fea14db88514aac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10530 Malicious code in web3-toekn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b34b72b8ff8d01e0d648851125a64aec37c620314f8895fea14db88514aac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...