MAL-2024-8542 Malicious code in @diotoborg/quaerat-eius (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1692e480f45d5350b281a70849c71c99ecb37ae4f751d0341e81232533ac8171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8405 Malicious code in @diotoborg/libero-debitis-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3962d51f7dd049fb20be0c78ca98fa5523c78987020230d2704c70bdc118e4c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8612 Malicious code in @diotoborg/repellendus-est (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 025ad2a4a8a3e55e1596e4acea55c95e0a3acb90c397b7677ff2763ad776c7d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8232 Malicious code in @diotoborg/distinctio-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a7ae92abdd8ec95b10dca1fcc75b714e34212d279c383b675c942d50b97f95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8691 Malicious code in @diotoborg/voluptas-saepe-officia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be67c0c631b99905116afe7a6d117afd7cb088010c30c4c7c111a75052196d2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8399 Malicious code in @diotoborg/laborum-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078e2e1f34f5bbc720834781bd58942eaad607e424888cd8c33cdaaaf56854b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8425 Malicious code in @diotoborg/modi-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00bec08eeb175b83a43d0938aa51d71e9d4bb0e81d4ddfc9d91714d0765f96ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8386 Malicious code in @diotoborg/itaque-ratione-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3909ca518a853949a4cc176fad01652b878951f4383c8511213f8f75f02cfac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8298 Malicious code in @diotoborg/est-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 123216ff6075f5c5fd7c70158b40456dc13dd5b468ee52df0fd1491f9c54b71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8358 Malicious code in @diotoborg/illum-ad-corporis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8224 Malicious code in @diotoborg/dicta-recusandae-veniam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec79f36c2a8336b9840f24bfc59847acfb4e18a7909792f533ece2397a29d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8476 Malicious code in @diotoborg/non-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfc15fc5f38fd3f6e22dba7c6a6376651aa64706e3e0602a50903b3068117782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8185 Malicious code in @diotoborg/consequuntur-dolorem-dicta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f213e5ae0b66204727b039d73a0c80ce3554366c5cfe52e65f43fc9da97cd90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8244 Malicious code in @diotoborg/dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594648a6e233b1180f89cb194e6ddf0cebf9f265ae0f11b2b6d13533ccfc1d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45508

creationtimestamp| type| source ---|---|--- 2024-09-02 01:19:48+00:00| seen| https://t.me/cvedetector/4585...

Adobe XML External Entity Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Adobe XML External Entity Injection', 'Description' = %q Multiple Adobe Products -- XML External Entity Injection. Affected Software: BlazeDS 3.2...

Atlassian Crowd XML Entity Expansion Remote File Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Crowd XML Entity Expansion Remote File Access', 'Description' = %q This module simply attempts to read a remote file from the server...

Drupal OpenID External Entity Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal OpenID External Entity Injection', 'Description' = %q This module abuses an XML External Entity Injection vulnerability on the OpenID modu...

OpenNMS Authenticated XXE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'OpenNMS Authenticated XXE', 'Description' = %q OpenNMS is vulnerable to XML External Entity Injection in the Real-Time Console...