BlueCat Networks Device Registration Portal 代码问题漏洞

BlueCat Networks Device Registration Portal is a standalone application from BlueCat Networks, Inc. for auditing and tracking all devices attempting to connect to the network. A security vulnerability exists in BlueCat Networks Device Registration Portal version 2.2 that stems from an XXE attack...

PT-2023-19067 · Blue Coat · Bluecat Device Registration Portal

Name of the Vulnerable Software and Affected Versions: BlueCat Device Registration Portal version 2.2 Description: The issue allows XXE attacks that can exfiltrate single-line files, potentially containing credentials, such as those found in .netrc files. For example, a single-line file might...

Information disclosure

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds...

XML External Entity (XXE) Injection

aXMLRPC is vulnerable to XML external entity attacks. The vulnerability exists because the library does not properly validate the XML documents submitted by the users via the parse function of ResponseParser.java, allowing an attacker to inject malicious XML documents to perform requests on behal...

MAL-2023-571 Malicious code in lucifoxero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24e496d1286f59f364036c6adac3c875c49e090d2a787ad96a135a6b8476fb85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lucifoxero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24e496d1286f59f364036c6adac3c875c49e090d2a787ad96a135a6b8476fb85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

MAL-2023-161 Malicious code in cas-core-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26d20be8c341ff87fc8ce4d2871dea36d7e1f5d778de7bc62e991d54c73764b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-500 Malicious code in hiring-without-whiteboards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c86a6c1ba7eeb700ad39245d9f6e5bd53cee80dcfdd43819e13ea756c0cc3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-80 Malicious code in action-surefire-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dd64ecec34f5bd03737caac41ac1993aafb8bfc6ac4de27c5ff59368d76b4f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-212 Malicious code in create-or-update-comment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 529afddb0ce1c2ffee5a4ae20c89657596df9fb27440956e1f78e8f6b80cb67c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-106 Malicious code in asdtestaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a81207a96568ae9a6efe36a302eb8dfa7d832a0d45836428a23dc7427ac953fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-474 Malicious code in github-actions-slack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0838fb57bbc4692fe40f976eb83599cc51f263c1c3a3eb1b231cbb7939a34a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Maximo Asset Management, IBM Maximo Manage in IBM Maximo Application Suite and IBM Maximo Manage in IBM Maximo Application Suite as a Service may be affected by XML External Entity (XXE) attacks (CVE-2021-33813)

Summary IBM Maximo Asset Management, IBM Maximo Manage in IBM Maximo Application Suite and IBM Maximo Manage in IBM Maximo Application Suite as a Service may be affected by XML External Entity XXE attacks. Vulnerability Details CVEID:CVE-2021-33813 DESCRIPTION: JDOM is vulnerable to a denial of...

MAL-2023-464 Malicious code in ftx.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5135d751992b5d4c6a940cfaf74fe516bcb12b50bdcb801313933da407c5a33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stake.fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c198061bbe55dd2f115328a3de12953984382e472f1c6044d6eb9ea36b13edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-317 Malicious code in everstake.one (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28abdd3e255919265b3c31fe76622c4b487b9bb26f98f9abb19f3f945e7bb5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-460 Malicious code in frappe-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fd4c91421f9d8f397b84256da7d774eaa4de780d5790b0b17a27315cc7c8479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-233 Malicious code in dep-conf-test-tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11ab34becb955a22cbb02099997e4c3301a8dcfb0559a59ebcb0a32770e7bdc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-234 Malicious code in dep-conf-test-tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97fd877e41e24812639dbd001e200927c3673576a2de4c71c76cde33df0dda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...