OpenNMS Authenticated XXE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'OpenNMS Authenticated XXE', 'Description' = %q OpenNMS is vulnerable to XML External Entity Injection in the Real-Time Console...

Drupal OpenID External Entity Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal OpenID External Entity Injection', 'Description' = %q This module abuses an XML External Entity Injection vulnerability on the OpenID modu...

Nexpose XXE Arbitrary File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'nexpose' class MetasploitModule 'Nexpose XXE Arbitrary File Read', 'Description' = %q Nexpose v5.7.2 and prior is vulnerable to a XML External Entity attack via...

MAL-2024-8095 Malicious code in investitsionnaia-platforma-finam-p2p-zil8cb0ii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0f7ffb84c271562d5d11d1e496b4ab57ad68d9fd2d3196f82b59d0c028cdbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8096 Malicious code in kak-kupit-kriptovaliutu-v-rossii-cherez-tinkoff-investitsii-s21dt6n0d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722439ce10201bd57480a22eff49b9404dd698bbc8e34f901c4259142722a1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in copilot-web-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb28669371353c111a05f7fb6bb2803179610b8ccec893590a34d2343e90fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8081 Malicious code in milowebsdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a40bdfac421ca7bca789b4f66c1bb8d98644cd0cda4e376fa9d1cdb2e63625ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8070 Malicious code in commitlint-preset-halo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b7e833bc850b9e63b0465ff039204c0ffca31632fd1c5fec4e2b3e32e8f0878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8093 Malicious code in yyb-monitor-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e875b3137112fba7095315990205008d6a37bdd38cf6fc166b7a7f3de1ada1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8086 Malicious code in noblox.js-threads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff6e7081bd0620aa9d7475eb55589362075317d25dceecf4c6df7ce2230ce28e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8083 Malicious code in noblox.js-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6617325d384923ff6c3550fcdbbca7335b83dfe3648f2218ad700e0ef12f601f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8090 Malicious code in sweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ddd212ce30f7b7db65579b6f4be56f10137c104c7ab63553566ccd90a1ff3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8073 Malicious code in finam-p2p-nvsniohj8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72a6c8ed38a861980c68e6752dc171adaf30ae4b9080b9aefe4a71b5a5d34eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8068 Malicious code in as-rest-api-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce680287c711409073b5144305ae85ce29123f6841998697d979ee6414baddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-6096

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.6.3 Description The issue is related to a problem in the libexpat library, which is used for parsing XML files. It is caused by the library's failure to properly restrict references to external XML entities. This c...

CVE-2024-45048 XML External Entity Reference (XXE) in PHPSpreadsheet

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows for an XXE-attack. This in turn allows attacker to obtain contents of local files, even if error reporting is muted. This vulnerability has been...

MAL-2024-8059 Malicious code in lodash-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f3565f115c4b58b6ebacb1536e206aa7c84c9f3a0c73b0ebe5628ae94d0546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8054 Malicious code in @mp-ss-promotions-lib/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aa7f38eaa1d9a14789ef8ced25b4c36bad2a99d21d0f2ef8a92e214ce781b44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8052 Malicious code in @costs-components-ui/costs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece207d1ff381cbf6348d88e14e6f00be9e5e0dfb7a42589cdc2bbb55de054e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8063 Malicious code in side-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9233d92d37692726bc693958e27369fe68aa103372f8d54bc94628aa64e1bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...