CVE-2024-51136

The CVE-2024-51136 entry describes an XML External Entity (XXE) vulnerability in OpenIMAJ’s Dmoz2CSV component for OpenIMAJ v1.3.10. The root cause is improper handling of external entities in XML files, enabling an attacker to read sensitive data or potentially execute arbitrary code by supplyin...

RHEL 7 : python-defusedxml and python-pysaml2 (RHSA-2017:0937)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0937 advisory. The defusedxml package contains several Python-only updates for security vulnerabilities in Python's XML libraries. Defusedxml functions and classes...

OpenIMAJ 安全漏洞

OpenIMAJ Open Intelligent Multimedia Analysis for Java is an OpenIMAJ open source collection of multimedia image, text, video, audio, etc. content analysis and content generation libraries and tools. A security vulnerability exists in OpenIMAJ version v1.3.10, which stems from an XML external...

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

Malicious code in allocations-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2043c21b9a8ddcf7961abb0f633a777981430b94043ebf735afb392ad92c84b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gyaani (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb67552bd91849ea3638c757ce2ae5d51fb7953df212be9ece860b2453b9b314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10303 Malicious code in gyaani (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb67552bd91849ea3638c757ce2ae5d51fb7953df212be9ece860b2453b9b314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10302 Malicious code in freshchange (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef4af44ca82b1bcc59591f04f573a67cdbb3de08f662fe614ab84b9b2bf443e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10260 Malicious code in eslint-config-ezugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d56fee7da920240c31fc321fe3cf58c9364d91f02c237c95103fbb7d7922dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10264 Malicious code in metadata-attacher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6eea908e9ca02abdc2e10b5fd9250bcece1ba385f9605460c33dcf8df855dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through 1.3.980...

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

MAL-2024-10248 Malicious code in meso-event-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d79c3ff4f9e728af1f55032123d3c43887f3d0e183e4944c0d9a489c6259759 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10255 Malicious code in videoads-util-misc-general (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e09df3f56783004e4936e57f3a6dac4e757c0d2d3cb2c0acf10bf15c6f4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meso-event-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d79c3ff4f9e728af1f55032123d3c43887f3d0e183e4944c0d9a489c6259759 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10254 Malicious code in tds-styled-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fd1f1a79e054904c1996f83eaebf071439a273c6c1eb478e4f6c2fed1a2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10246 Malicious code in ing-friam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505446a4e65d22ebe822726b54fe16f30ada8b63c354fd2a0a976381d7323e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10249 Malicious code in offensive-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 893b805fad3e01a5b0c3843b799e418623c7ea7d1bc2cbcf04b513c650e3d151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...