CVE-2022-22380

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957...

PT-2023-29659 · Proself · Proself Mail Sanitize Edition +2

Name of the Vulnerable Software and Affected Versions: Proself Enterprise/Standard Edition versions 5.62 and earlier Proself Gateway Edition versions 1.65 and earlier Proself Mail Sanitize Edition versions 1.08 and earlier Description: The issue allows a remote unauthenticated attacker to conduct...

MAL-2023-8381 Malicious code in data-kempremium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ffb4f398ace8285093c5eb454687bbc7d7ceb895997acb08461f926659685fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8382 Malicious code in fca-kemdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287f0297a75a759baf26a653469422f43653a6ccb17b28941f58e54279b623b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Glances vulnerability (USN-5187-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5187-1 advisory. It was discovered that Glances incorrectly parsed untrusted XML data due to usage of xmlrpclib. An attacker could possibly use this to...

CVE-2022-32755

IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505...

Xxe

IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505...

CVE-2022-32755

CVE-2022-32755 affects IBM Security Directory Server 6.4.0. It is described as an XML External Entity (XXE) injection when processing XML data, enabling a remote attacker to expose sensitive information or cause memory/resource usage. Remediation referenced in the IBM bulletin: apply IBM Security...

IBM Security Directory Server Code Issue Vulnerability

IBM Security Directory Server is a suite of enterprise identity management software from International Business Machines IBM that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. A security vulnerability exists i...

PT-2023-7009 · Ibm · Ibm Security Directory Server

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Server version 6.4.0 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory...

MAL-2023-8374 Malicious code in by-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 020adf63230fbcb34dc4642692ba5c5a7b6df10d3210f7f53717db56ba4e98dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the SAP Business One resource management system, related to deficiencies in the mechanism for generating error reports, allows attackers to gain unauthorized access to protected information and execute XXE attacks.

The vulnerability of the SAP Business One resource management system is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and carry out XXE attacks...

SAP Business One XML External Entity Injection Vulnerability

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. An XML external entity injection vulnerability exists in SAP Business One version 10.0. The vulnerability stems...

The vulnerability of the plistlib module in the Python interpreter allows attackers to execute XXE attacks.

The vulnerability of the plistlib module in the Python interpreter is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...

MAL-2023-8333 Malicious code in @dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45cfaa8e8c857c3d794bba3095a010e4210da4d46a216b4a5bb3b9e155a8e5f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8347 Malicious code in situs-slot-gacor-slot-online-resmi-terbaik-mudah-menang-dan-maxwin-2023 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed117fc0df745b25c18fac4374260486998e37259de0c6bdc83baab0df4a485a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in situs-slot-kakek-petir-slot-zeus-pragmaticplay-gampang-menang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b94e9e8709bc7ba76ccec7d3d404281d09407313462298222077fad647c55ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c010afee8561b173cf2644e0cf79595bc1f4c292cf5d3c68a90de24f2a655cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Grayling APT Emerges as a Silent Threat Targeting Taiwan

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The Grayling APT group orchestrated a meticulously planned targeting campaign with a primary emphasis on espionage. Grayling set its sights on a government entity in the Asia-Pacific region, along with...

MAL-2023-8341 Malicious code in n-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3eea908e1ac1801f4b2bfda0ee3333942a9af0f46e5f4e2b41de2a2b8d9b66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...