MAL-2023-8280 Malicious code in @badolkhan420/fca-badol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436ac692985a2fae4a79ec7010810f6a2b4d617ea932fab96f222989b578f74b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8272 Malicious code in fca-dongdev2006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf5437c60d73e7273ff4571779c50accd1552a3d68fc66cbba3810860670bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8271 Malicious code in corporate-delegate-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177836844dbb30a41ac458ca968707ca386ae3dce8f06fc76b0cc7b9285a6518 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-42132

FD Application Apr. 2022 Edition Version 9.01 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

Xxe

FD Application Apr. 2022 Edition Version 9.01 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

CVE-2023-42132

FD Application Apr. 2022 Edition Version 9.01 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

CVE-2023-42132

FD Application Apr. 2022 Edition Version 9.01 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

Improper restriction of XML external entity references (XXE) in FD Application

Overview FD Application provided by Ministry of Health, Labour and Welfare improperly restricts XML external entity references XXE CWE-611. Toyama Taku and Sakaki Ryutaro of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Ear...

FD Application Code Issue Vulnerability

FD Application is an application software from FD. A code issue vulnerability exists in FD Application Apr. 2022 Edition 9.01 and prior versions that stems from improperly restricting XML External Entity References XXE, which could allow an attacker to read arbitrary files on the system by...

PT-2023-28280 · Unknown · Application

Name of the Vulnerable Software and Affected Versions: FD Application versions 9.01 and earlier Description: The issue improperly restricts XML external entity references XXE, allowing an attacker to read arbitrary files on the system by processing a specially crafted XML file. Recommendations: F...

MAL-2023-8258 Malicious code in starcoffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21d2d2d622bacbbb48186877f4de201e3ef7466ac586b34502e7df3b1dfc5e37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2023-1695834624 python3: Fix of 2 CVEs

CVE-2021-3177: Replace snprintf to prevent buffer overflow - CVE-2022-48565: Reject XML entity declarations in plist files...

Entity cache - Critical - Information disclosure - SA-CONTRIB-2023-046

Entity Cache puts core entities into Drupal's cache API. A recent release of the module does not sanitize certain inputs appropriately. This can lead to unintended behavior when wildcard characters are included in the input. The impact of this bug should be relatively minor in most configurations...

MAL-2023-8244 Malicious code in arcotest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729c32fc154769efa0f919edac30e00d9e8a63dc05f166d3a156924f939750f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8245 Malicious code in arcotest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078ddfad78f2c5ca9ae82c040a4a51c180fedd8116e46f32a6a6fcdff2e8561d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8250 Malicious code in fca-priyansh3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd0e5c080a7eaaffbca2eaab0a8d833f9f08cb3b4a122235e6d1c61adb46a0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8253 Malicious code in thinh2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f8d03b386fe1014644e4170699db11a1fccd1cec5639a5e99ac272d9fd12c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Multiple vulnerabilities in Apache Camel core affect IBM Application Performance Management products

Summary Apache Camel core is used by IBM Application Performance Management. The vulnerabilities in the product component have been addressed. Vulnerability Details CVEID:CVE-2014-0002 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by an error in t...

MAL-2023-8228 Malicious code in beta-fhr-nxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d17d64e039783ffdcb641aab3eea7afee429e6a2b80ebb2556f96d8951beb39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8236 Malicious code in fca-rqzax-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ecedbb47457d84a3321523d3e9df1d860170b1c57af2d4fb6b5faf7f89b742a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...