MAL-2024-8718 Malicious code in dowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2c3c51b9a2299a8d75d9bedd630252bc337635de7b3c44c0d1da0054fc71de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8714 Malicious code in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee471b163c12366bb71dcefa110286c5a5ea8c0cfd9faf231c4f9cf8f9be081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8710 Malicious code in assistance-finder-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736cb085b408315e3153f05af689db208cc6cd59cda88238c550b56a34e55a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8722 Malicious code in muthuthehacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c70da09f0a152dd4b4ccda2553a4a0ed73802be2829b6fe7b5186932ae8375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8719 Malicious code in muthu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685a60c5c7b1a25ac7c5953df4a74e2f9e979dab99a7225199c06ec36361b8b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-2324)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.12.0 : expat (EulerOS-SA-2024-2324)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via...

EulerOS Virtualization 2.12.1 : expat (EulerOS-SA-2024-2304)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-2304)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XML External Entity (XXE)

GeoNode is vulnerable to XML External Entity XXE. The vulnerability is due to improper handling of XML input in the style upload functionality of GeoServer, allowing an attacker to read arbitrary files on the server...

MAL-2024-8635 Malicious code in @diotoborg/sit-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b5df872f2f927576a8a09127da72400b0228dd051f635b6572ce6765633693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8200 Malicious code in @diotoborg/culpa-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23563562da91e02760d001e09c2a7371552beaa58b6373fc2014e9ddec4b0f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8167 Malicious code in @diotoborg/autem-vero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239c77c66f6ccb8f7dcbcbd73746657981045cbd106678133760ac1a486b680c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nam-quod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ce2c3c4ed77a6e2eb84e09d7263200ad248447dc223050c80c3f7b82e88c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8464 Malicious code in @diotoborg/nihil-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731e38fe091711f36195c47b81a5aab6a7ef8a9c28f13be047a7fe8394a2ba5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8295 Malicious code in @diotoborg/est-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6818891465ce24e34d7e9ebc0de1aa4a5e92a56cfa5b1762d57abccb28d17c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8227 Malicious code in @diotoborg/dignissimos-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7308937c33a61b0632a55ac5e388894c5bd392e8ac4de9192f877ed18cb6126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/officia-ullam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66862ebf94e078bb39530cdd7080f8a0b400c41c5af84a9b067808c64fed046e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8504 Malicious code in @diotoborg/officiis-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4320fd5bcade789cdb77ae7b1b3ac61d034a81489784855dbc08cbe9afff11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8449 Malicious code in @diotoborg/necessitatibus-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54cea7f10ba6d1a7fc32d2c01287b9d98e75514ca2581bc1cf6f0938b4a44c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...