XML External Entity (XXE)

phpoffice/phpspreadsheet is vulnerable to XML External Entity XXE. The vulnerability is due to a flawed XML encoding check in the toUtf8 function of the security scanner, allows crafted XML structures with whitespace to bypass the security measures intended to prevent XXE attacks...

MAL-2024-9184 Malicious code in shmam-test-npm-test-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b028136f8820f808eb720a45a7f396272c884a63944c004999ce50781449b6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-JQFV-JRVQ-95JM Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

DEBIAN-CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

UBUNTU-CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

CVE-2024-28168 Apache XML Graphics FOP: XML External Entity (XXE) Processing

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

MAL-2024-9130 Malicious code in bcsgb0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfcb4c38c6f16fbc50c3efb3401f855ea4cad84cdaf68c9badd88e80a581e84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in d40tmf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4866ac2f2461e74cfa4509e5237bcbfbaae69a548dde50b492463051daa8baed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9124 Malicious code in agquu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36919c509db732cc8b07bcc95c88a4b21998332aa2abc81d5a35a9340345b3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9188 Malicious code in svuv9u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d10f8dd67eadf279ea287de2957730d8a0e580934d01a44a23d868ab3534fdb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9195 Malicious code in updated-script-rainbow-six-siege-renown-method-unlimited-undetected-updated-2023-aaseax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1e38a8e46fd7a50a4aa74b0c1f46075a329295be810eb70a479185500004b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9208 Malicious code in xkpnm0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa41e4a8231fcd0afc64bf75584739b7b8e64b504e37d6242b19b9685d29c2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9200 Malicious code in updated-today-gen-muck-c-h-e-a-t-injector-f-r-e-e-god-m-ode-speed-h-a-c-k-2023-undetected-oi37fp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26688f0b878a64cb8685eb7de542d452b53b0fed1f1ac1f1da158e128bb006c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9138 Malicious code in code-script-new-roblox-muscle-legends-script-tr9plv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 780f0af2802d39365386734610e4539ac7340ae349dd24768d304da50c560f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654f49589ce2c8c7994c0b01b6297081f21b24a5d5caa9991ef8be0e21ea3165 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9127 Malicious code in b3rnt7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f36c23002f7cc6c40ed39eee45af8aa13ed343fa9d96ffb4aff7581eb014ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9170 Malicious code in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654f49589ce2c8c7994c0b01b6297081f21b24a5d5caa9991ef8be0e21ea3165 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...