MAL-2024-1221 Malicious code in @lbnqduy11805/miniature-garbanzo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcffefda213d3086dea5171af4cf2ac346c9339aded3010d0b328552ff27db66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1218 Malicious code in @lbnqduy11805/friendly-doodle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 802b2dcf0e836c6a955cab90d444fba0aac8f4b098f5b7b1e19e1ab2b6fa3b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1222 Malicious code in @lbnqduy11805/miniature-train (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a2b8f13c15c44f99ee06b68946d7ed74786ca71b3c59f8caf08b2e61dafcd9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1237 Malicious code in @lbnqduy11805/studious-octo-waddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c073697c9ccab5e44be0c257384fa4907147f96dda92c23b1c611c01e67788cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1231 Malicious code in @lbnqduy11805/reimagined-happiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97e2395d2365418c586217033d6037fb2930c3ad943b2010f1cb2ef41bde62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1234 Malicious code in @lbnqduy11805/special-funicular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e510788258c2e96a7ed65aec022cdbf449160441eb8756af374bb6c46e8b313 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1248 Malicious code in benjimain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81874f877a599ba4cd7f60d6888ff32a9768be0126b292e92f2b1716c2b88135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

openSUSE Security Advisory (SUSE-SU-2024:1129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: expat / libexpat-devel / libexpat-devel-32bit / libexpat1 / etc (SUSE-SU-2024:1129-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1129-1 advisory. - CVE-2023-52425: Fixed a DoS caused by processing large tokens. bsc1219559 - CVE-2024-28757:...

Malicious code in tokenaddress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025a8419e068972440e8ce7318279901ab845fea1c593ecc34fda8d7f59122d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1209 Malicious code in recxn-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ab1a9ec173dddfe29440874a55934c0478e3e08950a7b36638ae2a7127f88e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1210 Malicious code in recxn-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccd7ee6ab1ab371569d54327f1be159efb74e581af0866b91b5b724e9c4cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2024:1129-2 Security update for expat

This update for expat fixes the following issues: - CVE-2023-52425: Fixed a DoS caused by processing large tokens. bsc1219559 - CVE-2024-28757: Fixed an XML Entity Expansion. bsc1221289...

SUSE-SU-2024:1129-1 Security update for expat

This update for expat fixes the following issues: - CVE-2023-52425: Fixed a DoS caused by processing large tokens. bsc1219559 - CVE-2024-28757: Fixed an XML Entity Expansion. bsc1221289...

MAL-2024-1206 Malicious code in f3ngtest12345677 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c45841bc7c5a73373ee4764c017a128bb5dd286d34d5d4a2bf649338aa1644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite may be affected by XML External Entity (XXE) attack (CVE-2024-27266)

Summary IBM Maximo Manage application in IBM Maximo Application Suite may be affected by XML External Entity XXE attack. Vulnerability Details CVEID:CVE-2024-27266 DESCRIPTION: IBM Maximo Application Suite is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A...

CVE-2024-22023

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS...

CVE-2024-22023

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS...

CVE-2024-22023

CVE-2024-22023 describes an XML entity expansion (XXE) vulnerability in the SAML component of Ivanti Connect Secure and Ivanti Policy Secure (versions 9.x–22.x). An unauthenticated attacker can send specially crafted XML requests to trigger resource exhaustion and temporary DoS. The provided docu...

CVE-2024-22023

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS...