Malicious code in matomo-looker-studio-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8882cb12f515121a2bb1a68d29a247d90b65f5a85e13154e1ed8988e0c4bbcf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-16 Malicious code in get_name_of_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5dfc1df3f6f7257bc6a0ffb95fad3de4cde82911c81d5f21f1d8b70d05d6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9 Malicious code in @msmg-money/get-current-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fc0472c5df497035ba44d0a77a71996819e8234defd28002ebdc7079ff477ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8773 Malicious code in holland (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7126f7b736ad37c767545428db7c071735738d8ae229e34b18808054f175e6ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-selbotderank (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5260eb5b081fbed08c3915d652632aed1e6899f2bca15853a142f45cf5b35c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8752 Malicious code in discord.js-self-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ff51b0a254299fbcba44e692ad912d759a48d835ffcb10759424392b1debdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8734 Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8738 Malicious code in element-block-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6f663cc9659fa8c59510bbcafc19cd5f945595016e12e8f603250d824196cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Path Traversal

org.apache.tiles: tiles-core is vulnerable to Path Traversal. The vulnerability is due to missing validation in the DefaultLocaleResolver.LOCALEKEY attribute set on the session while resolving XML definition files. This can lead to Server Side Request Forgery SSRF or XML External Entity Injection...

MAL-2023-8727 Malicious code in discord-selfbot-v13.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a28fa86e7d878dc6267f483fefbb3fdab0fe04ea75dffa4de10cc5ad899c5be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

(0Day) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

(0Day) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

(0Day) Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the doDocument method. Due to the improper restriction of XML...

(0Day) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2023-46265

An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery SSRF...

CVE-2023-6280

An XXE XML External Entity vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network...

MAL-2023-8716 Malicious code in bv-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94e80ca26866e3606d109422a90b437b22822a2c3cd64b9d0584b35114f07c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8723 Malicious code in nice-dag-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9daba1d90e3e64cd044b78b1bbb9123a3c748dddbd37b2549c9dee2164eaa56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8721 Malicious code in jupyter-notebook-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149056bec7a565568bd2ddea92746e800266ecb291da0df46551b2d1766551bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8717 Malicious code in crossdomain-xhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab343d1f78365f0bc2589bd835b94aa0fd90723d8e80a9d0b774a3a99589b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...