MAL-2023-1524 Malicious code in test-dr-pkg-001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d511e9d40183359a36594e6f9c61d50195d8e1686197d6e9aded6ba780e8fda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1529 Malicious code in usaa-page-transition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f294cfe073939b35b3fbbbaf04226a2d2b42eb889c8efc7fe305df01cef811cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1517 Malicious code in ent-disclosure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fc8ed92b0d19f6d8082cc449fa37e01fb55a55f8391167d18189353b85b9f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1523 Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1512 Malicious code in browserslist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08f5ede6b0f56a4b6366c22c4622d7cddc43a2d689f021f8a179e72c2fa6220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Use After Free

libqpdf.so is vulnerable to Use After Free. The vulnerability exists due to a lack of entity value validations in the libqpdf parameter of PlAESPDF.cc. An attacker could exploit arbitrary code into the system...

MAL-2023-1486 Malicious code in inf-build-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 033fc49e1c2258614dc2c2a1b849039e2cea7095fb6f4a4b95ccb8bde9955df0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-8841 · Apache +1 · Apache Ivy +1

Name of the Vulnerable Software and Affected Versions: Apache Ivy versions prior to 2.5.2 Description: The issue is related to improper restriction of XML external entity references, which can lead to XML injection, also known as blind XPath injection. When Apache Ivy parses XML files, it allows...

Applying Data Ontology Concepts to Protect Data

Data breaches continue to be the thorn for most organizations despite the sophisticated and innovative cybersecurity tools that are used to stop what is now the inevitable cost of doing business in a hyperconnected world. In this blog post, I’ll explain how organizations can increase the...

MAL-2023-1478 Malicious code in nayan-remake-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d070e4a8383eabce1345f021b7af456ece14dd4d4d01ea727e2b528f2fd68227 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1477 Malicious code in miro-api-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 787331785bd7ba05994172e4c86d95681d3e2e53caf8660a6832eed760fbfb68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tianfengqwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6f7db121452a5fc346f93dedc863aa336e3aaa04145c00616f4e237f003f93f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in marketplace-ibm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2229ff8297b170086d48bec628cc6f20b8a1d8ff26af91033c0e1049a43e9cb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1462 Malicious code in square-apple-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9fccff4670e174a264245cd74f260281cf3cbd751f4a24bb9516c4b1038a35d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloud-room-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7995bf141e79ead6fc8464a011cc856eb05c0c23ba1855b002b45a7e60002c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1457 Malicious code in cloud-room-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7995bf141e79ead6fc8464a011cc856eb05c0c23ba1855b002b45a7e60002c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

entity-health.com Cross Site Scripting vulnerability OBB-3578637

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-2QC8-R663-V864 OpenNMS Horizon XXE Injection Vulnerability

XXE injection in /rtc/post/ endpoint in OpenNMS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...

Xxe

XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...

CVE-2023-0871

Affected product: OpenNMS Horizon (OpenNMS Horizon). Vulnerability: XXE injection in the /rtc/post/ endpoint. Root cause: XML external entity handling allows an attacker to cause Horizon to fetch arbitrary resources. Versions affected: Horizon 31.0.8 and earlier than 32.0.2 on multiple platforms....