Security Bulletin: Multiple security vulnerabilities in IBM MQ affect IBM Robotic Process Automation.

Summary Multiple security vulnerabilities in IBM MQ affect IBM Robotic Process Automation. This bulletin identifies the security fixes to apply to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-25026 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere...

MAL-2024-9292 Malicious code in discord.jselfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a61c990eea82ae2bbc613649aabde4884684f69fa4b649655cbee9e1e5018293 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9294 Malicious code in module-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb37f88f9f6a37fa239ee1d591acdd1ee642b1d6447cba12accde00c474a94bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-39124 · Unknown · Taxstatement.Jar

Name of the Vulnerable Software and Affected Versions: taxstatement.jar version 2.2.2 taxstatement.jar version 2.2.4 Description: The default settings of the DocumentBuilder allow for an XXE XML External Entity attack when reading XML from PDF codes. This could enable an attacker to deliver a...

OESA-2024-2243 fop security update

FOP Formatting Objects Processor is a print formatter driven by XSL formatting objects XSL-FO and an output independent formatter. It is a Java application that reads a formatting object FO tree and renders the resulting pages to a specified output. Output formats currently supported include PDF,...

MAL-2024-9277 Malicious code in opti-distube (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3af3574daa38d327bf074dc23f3627c241c0258ea93709ea388218ec157ad828 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9230 Malicious code in duckc2-v5.3.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1787f323cf8287cce75c9f98309dbf5edfb1721a840a920500ec0e0cdb6be06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9227 Malicious code in duckc2-v5.2.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 312f10b261529061f06f146485b626f5ac5f86887bd775baa9cc015f430d1e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9229 Malicious code in duckc2-v5.3.5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375fe67ac59d8abd545809431db7b3e818c78cd1e2d0798eaff2cad2f48069ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vault Operators in Root Namespace May Elevate Their Privileges

Summary A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. This vulnerability, identified as CVE-2024-9180, is fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18....

MAL-2024-9244 Malicious code in prismjs-editor-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 040f9d206fa46c86f67191c2a1777918670867a6e0888635b2f08567360ba10f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9239 Malicious code in jacoco-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b69d2d6c05db4695b8af9c114b5851c1c95e7e59f07fa671941231429709fb2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9220 Malicious code in com.sendbird.calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f118ef1bd121c69542e3a9d813f6e42601d38118849a030f91f89ecacd45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9236 Malicious code in hubs-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9911fbb7c4054a35f69df90bf8f46b5d9bf5e2be6e2eaafc492ca5ceb11ed9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9214 Malicious code in 1-2-customization-basic-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 126e6a02667bae4fef0e53e63993ad1bbf76556e75e37e0e74daf04a7cf00b59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in foldl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2abd5909394808c19b6d87a3b9b46e6356ee553bed6e8fe55dfa696dc0908b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9231 Malicious code in dynsegmentationserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4525a5815706847fd3060b12cfa83f7c24f6f1b1aad7bdfcee12c4ea5eed93b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9242 Malicious code in node-red-contrib-lowwercase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 577092139d0eab16ce212c5f1857a5bd55b8632d4d93358b21d74e379dbf7f60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9235 Malicious code in helri-shiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d519e88d591f17cacd1c40eb414b21e026b9ea5d54240b23399cf203aeb084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...