18892 matches found
SAP Business One XML External Entity Injection Vulnerability
SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. An XML external entity injection vulnerability exists in SAP Business One version 10.0. The vulnerability stems...
The vulnerability of the plistlib module in the Python interpreter allows attackers to execute XXE attacks.
The vulnerability of the plistlib module in the Python interpreter is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...
MAL-2023-8333 Malicious code in @dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45cfaa8e8c857c3d794bba3095a010e4210da4d46a216b4a5bb3b9e155a8e5f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8347 Malicious code in situs-slot-gacor-slot-online-resmi-terbaik-mudah-menang-dan-maxwin-2023 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed117fc0df745b25c18fac4374260486998e37259de0c6bdc83baab0df4a485a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in situs-slot-kakek-petir-slot-zeus-pragmaticplay-gampang-menang (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b94e9e8709bc7ba76ccec7d3d404281d09407313462298222077fad647c55ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in daftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asia (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c010afee8561b173cf2644e0cf79595bc1f4c292cf5d3c68a90de24f2a655cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Grayling APT Emerges as a Silent Threat Targeting Taiwan
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The Grayling APT group orchestrated a meticulously planned targeting campaign with a primary emphasis on espionage. Grayling set its sights on a government entity in the Asia-Pacific region, along with...
MAL-2023-8341 Malicious code in n-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3eea908e1ac1801f4b2bfda0ee3333942a9af0f46e5f4e2b41de2a2b8d9b66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8340 Malicious code in fca-emon-bhai-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7597210d8449795cfeb232c861661dd973e59c2d8e561d96acadf84c6b773d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8334 Malicious code in @emon-bhai/fca-emon-bhai-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dda8cf587fd89dbb973a1ad2d9121439dd65185b74c76fe48d5425e2967f400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Debian: Security Advisory (DLA-3614-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3614-1] python3.7 security update
Debian LTS Advisory DLA-3614-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 11, 2023 https://wiki.debian.org/LTS Package : python3.7 Version : 3.7.3-2+deb10u6 CVE ID : CVE-2022-48560 CVE-2022-48564 CVE-2022-48565 CVE-2022-48566 CVE-2023-40217 Several...
Debian dla-3614 : idle-python3.7 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3614 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3614-1 [email protected]...
CVE-2023-40310
SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external entities in BPMN2 file, although not used, would be accessed during import. A successful attack could impact availability of SAP...
PT-2023-5923 · Sap · Sap Business One
Name of the Vulnerable Software and Affected Versions: SAP Business One B1i version 10.0 Description: The issue is related to the error reporting mechanism in SAP Business One, which allows an authorized attacker to retrieve the details of a fault message. This can be exploited to conduct an XXE...
CLSA-2023-1696880318 python2: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...
python: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...
CLSA-2023-1696878189 python: Fix of CVE-2022-48565
CVE-2022-48565: Reject XML entity declarations in plist files...