MAL-2024-1422 Malicious code in @juiggitea/distinctio-tempora-quos-quis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e117b447f3dec0b0269d05cfea94ff028b4f8d24d17e0d3edf4eb62a9c801e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/distinctio-tempora-quos-quis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e117b447f3dec0b0269d05cfea94ff028b4f8d24d17e0d3edf4eb62a9c801e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1416 Malicious code in @juiggitea/consequuntur-iusto-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e60b0b781ba924189369693194aa3a108da4d111edb467b1d65cca4d85bb0dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1417 Malicious code in @juiggitea/corporis-doloribus-alias-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f9c6205f0f728b189117e9c030b3bc179b0ae2e54c44378eabd063f2950959 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1414 Malicious code in @juiggitea/consequuntur-aperiam-consectetur-incidunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a1c498e36348797a7336a26bf1c68c99d80edf6dc1c403b7dfa362c733af09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1405 Malicious code in @juiggitea/aliquam-at-eius (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6a0ae228f56bd35003733b29db0b578ebfb21b74cc3c2fe0061cd7e091f5528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1408 Malicious code in @juiggitea/aperiam-aperiam-amet-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66deca8c80ee8c47f48cc07b18aa17d5676ceb0964fd672e95395ab7253d4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1407 Malicious code in @juiggitea/amet-cupiditate-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f62fe064c189896bbcb72c87b6e37c6191013d4fa827ee24a85ba9abbcfc14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1406 Malicious code in @juiggitea/amet-beatae-voluptatum-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 018bdb0bbe62400a03d4b073b8822218185c13453cff98fb6343d9e931958537 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XML Entity Expansion

Symfony is vulnerable to XML Entity Expansion attacks. The vulnerability is due improper xml parsing configuration, where long entities can be defined and repeatedly referenced, creating a memory sink that can be exploited for Denial of Service attacks...

XML Entity Expansion (XEE)

symfony/validator is vulnerable to XML Entity Expansion. The vulnerability is caused by improper XML parsing configuration, which could result in XML Entity Expansion XEE attacks that can lead to excessive memory use and potential Denial of Service DoS...

MAL-2024-1505 Malicious code in co-pilot-auth_web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d490be43502540c62a740310c0ab3d38a35220e7b32f029a0c7e79e191104015 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1524 Malicious code in seller-journey-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503e20152f64ee06b84916ab160644ed8a89c688c4562ec22c13d23732fb7b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1516 Malicious code in eslint-config-bragi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e851afe55af274e357a46544f9bd048813b8ce8f08f586c4c9d0146faa3a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XML Entity Injection Vulnerability in Electronic Document Security Management System of Beijing Yisaitong Technology Development Co.

Beijing Yisetong Technology Development Co., Ltd. is a domestic data security, network security and security services provider of three major business. An XML entity injection vulnerability exists in the electronic document security management system of Beijing Yisetong Technology Development Co....

RHEL 5 : xmlsec1 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xmlsec1: xmlsec vulnerable to external entity expansion CVE-2017-1000061 Note that Nessus has not tested for this...

RHEL 6 : lucene (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Solr: Code execution via entity expansion CVE-2017-12629 Note that Nessus has not tested for this issue but has...

RHEL 7 : libxml2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxml2: Missing validation for external entities in xmlParsePEReference CVE-2017-7375 - The...

RHEL 8 : python (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python: tarfile module directory traversal CVE-2007-4559 - python: RecursionError: maximum recursion dept...

RHEL 6 : perl-xml-libxml (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call CVE-2017-10672 - The...