MAL-2023-8182 Malicious code in team-atf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc4bc178a5c3fa44d9ed6dfa7c429692ad3bb5b15556ee5cfcf089935bc92d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8180 Malicious code in simple-team-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad5da4b4631227adabb1a524dc451f3f7fce259d5c7c64d148e91f6edc74d4a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8178 Malicious code in fca-jordan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db5b69d0619a83137f953387a4c7da45c2b8cb1406cbdbc8dfdba20427b81cb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8173 Malicious code in fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bacf80ecaabd478055cb654ae5266e4b1d421e4de4fc9a563cdb1b2d94d449c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8157 Malicious code in thinhdz2001-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab41a3de452cf2af66e9a0c6c82ff728a75a79b69bee1df9d834f6989e86134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8146 Malicious code in nvthinh2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461728de25ed03b83136b1135b9729cf11914136dab3f1133f47339e61f2bac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8132 Malicious code in fca-giee-harizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dac87a14d59896904e8353176b2640f7777d15e03d470d44d457479d77519de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8135 Malicious code in fca_kaizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58495d710c97f1a072f8b1a7715f33d3a6c8db188dbcfe8438f47ec1e2e282b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8126 Malicious code in @abdullarahaman/fca-arya-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0d8bdc3f83aeb4fb00d8a78075559026cb93e20272f821c1d7735207d55ad8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8138 Malicious code in hardhat-contract-size (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2427df1a48ed59a242042ba5fd1d3fd1d95dff9640b59fcc3ab406f957e6c298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8151 Malicious code in telia-front-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915e7468494f50f3f273a20457aa01b3aec6e0f5cae88024b0db7ec5246c32aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8116 Malicious code in pathkit-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd2f75a6be38f760da43a16a773161961fbba11cf2beab0506f042ff494828bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8108 Malicious code in surf-sharekit-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 449f014291c34fa4bc1a855658d8ff0b9fe4788e1986e2410d3dc82ac8e50abb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8104 Malicious code in fca-dongsexx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54ae0b20028a7237a5d5284fa6a3fbae917dbe46cee4724c495d3e413eb0279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Medium: php

Issue Overview: A flaw was found in php. The main cause of this vulnerability is improper input validation while parsing an Extensible Markup LanguageXML entity. A special character could allow an attacker to traverse directories. The highest threat from this vulnerability is confidentiality...

CLSA-2023-1694538837 Fix CVE(s): CVE-2022-48565

SECURITY UPDATE: DoS in case of malicious entity directives - debian/patches/CVE-2022-48565.patch: Reject XML entity declarations in plist files - CVE-2022-48565...

CLSA-2023-1694538765 Fix CVE(s): CVE-2022-48565

SECURITY UPDATE: XML vulnerabilities in plist files - debian/patches/CVE-2022-48565.patch: Reject XML entity declarations in plist files - CVE-2022-48565...

CLSA-2023-1694538434 Fix CVE(s): CVE-2022-48565

SECURITY UPDATE: DoS in case of malicious entity directives - debian/patches/CVE-2022-48565.patch: Reject XML entity declarations in plist files - CVE-2022-48565...

MAL-2023-8089 Malicious code in antdesignpro2021 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2743e3748612ab32fe4aaa84ec3ee0b4a6f6063b07bdf9afa1bad50ade1d6ff2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-41369

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow do...