CVE-2023-4554 XML External Entity (XXE) Processing

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files. AppBuilder's XML processor is vulnerable to XML External Entity Processing XXE, allowing an authenticated user to upload specially...

MAL-2024-945 Malicious code in wlwz-2312-2nd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882cba6a3732f5a8d767cbf8721517b4495dcef6f36d8b7caeca1a565ff8b00b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-936 Malicious code in jewishapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19d1435255a826e73cab7760affeac8c2af279590c96b3b7470abe0630f4c1dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o2-ionic-image-loader-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-938 Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-934 Malicious code in iifl_ios_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87649558fc7b693ec6cc0ca38419068e0fce94a2f6a6eeb5d01dad7674980357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OpenText AppBuilder Code Issue Vulnerability

OpenText AppBuilder is an application from OpenText Canada. A security vulnerability exists in OpenText AppBuilder versions 21.2 through 23.2, which originates from XML External Entity Injection and allows server-side requests to forge, probe system files...

[SECURITY] [DLA 3723-1] libspreadsheet-parsexlsx-perl security update

Debian LTS Advisory DLA-3723-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 27, 2024 https://wiki.debian.org/LTS Package : libspreadsheet-parsexlsx-perl Version : 0.27-2+deb10u1 CVE ID : CVE-2024-22368 CVE-2024-23525 Debian Bug : 1061098 Security...

PT-2024-40759 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include the crash state with functions such as dwg free common entity data, dwg free...

libxml2: dict corruption caused by entity reference cycles

A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted resulting in logic errors, including memory errors like double free...

expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

XML External Entity (XXE)

Spreadsheet::ParseXLSX is vulnerable to XML External Entity XXE. The vulnerability is caused due to neglecting noxxe option of XML::Twig. This can be exploited to compromise Confidentiality of the system...

MAL-2024-165 Malicious code in distube-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ac3f289f159fa4961391d20b8dbb4b10a0467ac4654073bcc0aa7863caf8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7360cb70a37acefe9bafaf2f5ddce7d1cbb4fd9810f217ee6c5ba4aaf3727a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-909 Malicious code in wlwz-2312-8200 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1b249803843dfe82a17ee4255301159f54eaeba7c8dfcd3d1f2da6e52149e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-877 Malicious code in wlwz-2312-7805 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec6418669fad29e4f0f3245f19ca664b595d0d20339a72a2cb4414157e624b85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cdf7577c7f14a65c7696c0bf599db4d39ca3a25ddd8ad778f9c44e6391ea64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-871 Malicious code in wlwz-2312-7708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5278474541c9b13f05047170d2095937206db31c20264da510a471e1757963f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-908 Malicious code in wlwz-2312-8109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b142a0f7e3a073d733c5173f30071ba189294b64eff717882b0679e6226560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-904 Malicious code in wlwz-2312-8105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e324fa0bbd163b84f143cfdf696328031ae60c94d27665fdb29101da05a14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...