PT-2023-23878 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.1.236 Description: The issue concerns XML External Entity Processing in the decodeToMap function of Ivanti Avalanche, which can lead to information disclosure. Recommendations: For versions prior to...

MAL-2023-1073 Malicious code in blackberry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9964dae790097d3d0611a8ce5360dfdaa0b13f3cd3c065a19d6266778587688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1071 Malicious code in @zplayer/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9325a8f5e2a004590f244b8d6b932901682f7c476506f59fdf0cdf8792ebd914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1070 Malicious code in @freestarcapital/collector-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d6d60a5b8b659a55831770d4cd8f9d5ac0d59b6ae5c0e92d6305942cc40a455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1068 Malicious code in web3tool-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae905581e4e53e10b1d06262a96543b67f5f841e40d7723b81f455c968046cd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1066 Malicious code in web3tool-providers-ipc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45dd480c31cdb6a16b4c7308f724f05b190296dae7805a05b87ae74a81440fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1069 Malicious code in web3tool.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faed7c123bad8fe9028fa029f7e4c108dbecc8242fe2905610b6946c29e11e71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1063 Malicious code in web3tool-eth-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d12be8620708021936234e789248dd4ad0826cef81ef02171285815f476fb742 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jackshanyeshuzi/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73cdcc08a034f6ca420eba8cfe6a4494cfb7f5b42c13e598a03163984d4a6f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VBASE VISAM Automation Base FB.XML File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

VBASE VISAM Automation Base FB File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

VBASE VISAM Automation Base VBASE-Editor GestureConfigurations File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

PT-2023-26961 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Inductive Automation Ignition. Authentication is required to exploit...

VBASE VISAM Automation Base VBASE-Editor WebRemote File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

VBASE VISAM Automation Base VBASE-Editor LayerSettings File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

MAL-2023-1049 Malicious code in discordd.jss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ba506117e7c7f49158ad840669844fa4e7893e715370eb8bc3fd032617dd36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1047 Malicious code in @oyshoweb/front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc793cbc35cbd69fb4c7bbb4873d0b7a480c013daa6e004215c2455290cab3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-7058

Name of the Vulnerable Software and Affected Versions Alkacon OpenCms versions prior to 10.5.1 Description Remote unauthenticated attackers can obtain sensitive information or execute arbitrary code by sending a specially crafted POST request. This is possible due to improper restriction of XML...

XML External Entity (XXE)

php81 is vulnerable to XML External Entities XXE. The program handles XML documents that include URIs that resolve to external resources, resulting in inaccurate output and posing problems for the end product...

AiCEF - An AI-assisted cyber exercise content generation framework using named entity recognition

AiCEF is a tool implementing the accompanying framework 1 in order to harness the intelligence that is available from online resources, as well as threat groups' activities, arsenal eg. MITRE, to create relevant and timely cybersecurity exercise content. This way, we abstract the events from the...