Cisco Identity Services Engine 代码问题漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information from the network, users, and devices to develop and implement policies to monitor the network. A security vulnerability exists in Cisco Identity...

PT-2023-12701 · Ibm · Ibm Tivoli Workload Scheduler

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Workload Scheduler versions 9.4 through 10.1 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...

PT-2023-13602 · Ibm · Ibm Tivoli Workload Scheduler

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Workload Scheduler versions 9.4 through 10.1 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...

DRUPAL-CONTRIB-2023-005

The Apigee Edge module allows connecting a Drupal site to Apigee X / Edge in order to build a developer portal. Previous module versions did not support entity query level access checking, which could have led to information disclosure or access bypass in various places...

CVE-2023-20030

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access sensitive information, conduct a server-side request forgery SSRF attack through an affected device, or negatively impact the responsiveness of the...

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

Xxe

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

MAL-2023-891 Malicious code in toh-doc-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19436233a047eab780063a658fde54dd5df420b84f4e095b0af5b16f6d7e328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-893 Malicious code in tohe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b243cab2a6d28350da02c87edd35680ac4d18b7ca5f27ebc765f39a3773c1ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-94 Malicious code in angular-mocks-1.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 625a13c6d2cc904b846cc79015624cac75f57596e17606b783aaa1ccb6dcb164 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-466 Malicious code in gatorcomponents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f6b3dfba6b091155d80be64c8691f83194a213887c0069ce15b0092bd630d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Netcad KEOS 代码问题漏洞

Netcad KEOS is Netcad's local management solution that responds to e-municipal needs with secure, integrated data production and management capabilities. A security vulnerability exists in Netcad KEOS version 1.0 that stems from vulnerability to XML External Entity XXE attacks, which can lead to...

CVE-2022-47873

CVE-2022-47873 affects Netcad KEOS 1.0. The vulnerability is an XML External Entity (XXE) issue that can lead to Server-Side Request Forgery (SSRF) with remote XXE. The CVSS v3.1 metrics indicate a critical impact: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, with a base score of 9.8. Connected sources c...

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

MAL-2023-714 Malicious code in pxt-arcade-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d8c72a30beb5660a4ef7bc4ad2831a1aac167e41d4f8d7c2fab5e1e452e5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-903 Malicious code in tropine_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fd7c56c8bc0e04e729a9750b589a46dae70cc5c7a6196c635cdc8bfa6e3ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XSS caused by sending information between users

Description The forum allows users to send information. Although the script tag cannot be used, the img tag can also cause xss.And the program can bypass the filtering of the "cookie" string by means of entity encoding. Video link You can watch my video through this link first. link...

MAL-2023-397 Malicious code in fca-horizon-mod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7232077e158d7a1dab872f9a53e74ded24fe4fd59bfa9339ab696265b6634e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...