MAL-2023-466 Malicious code in gatorcomponents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f6b3dfba6b091155d80be64c8691f83194a213887c0069ce15b0092bd630d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-47873

CVE-2022-47873 affects Netcad KEOS 1.0. The vulnerability is an XML External Entity (XXE) issue that can lead to Server-Side Request Forgery (SSRF) with remote XXE. The CVSS v3.1 metrics indicate a critical impact: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, with a base score of 9.8. Connected sources c...

Netcad KEOS 代码问题漏洞

Netcad KEOS is Netcad's local management solution that responds to e-municipal needs with secure, integrated data production and management capabilities. A security vulnerability exists in Netcad KEOS version 1.0 that stems from vulnerability to XML External Entity XXE attacks, which can lead to...

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

MAL-2023-714 Malicious code in pxt-arcade-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d8c72a30beb5660a4ef7bc4ad2831a1aac167e41d4f8d7c2fab5e1e452e5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-903 Malicious code in tropine_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fd7c56c8bc0e04e729a9750b589a46dae70cc5c7a6196c635cdc8bfa6e3ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XSS caused by sending information between users

Description The forum allows users to send information. Although the script tag cannot be used, the img tag can also cause xss.And the program can bypass the filtering of the "cookie" string by means of entity encoding. Video link You can watch my video through this link first. link...

MAL-2023-397 Malicious code in fca-horizon-mod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7232077e158d7a1dab872f9a53e74ded24fe4fd59bfa9339ab696265b6634e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-384 Malicious code in fca-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a7307e2fcfdfd54a28ef285f8a2b91d3ac27e726313b0d0a1590d06eddea09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-818 Malicious code in supchat-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f04d9db61e2308e216a2c5778585400d2e4ef0a6c127575e7cc6a92a625e37d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-807 Malicious code in staff-www (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8814acf927915297c16c613cbe7ec500aeefd67cf9b5fc2bfc1d5102e46ed455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-320 Malicious code in express-http-geobase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc6b8a7571edb7965b16ec78583f4c16365b49bafd86d73309422cc51015aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-632 Malicious code in node-http-uatraits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f641b192ea9d09801f965d0b2e909f40fbc483a2f115e45feafed0376029a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yabox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ab13857c561d1c69db1fcb1c770817f9fa784ec2e34baf91b0b9b915a70f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-830 Malicious code in taxi-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097d1cf9ae16e020a782ddabda9f4556107a34ffa87be84afde01f013fe2e52a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-779 Malicious code in skip-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bd0d1ba40fe0bcfb78cdaa557309ff0a4c113dc2bedd58f36622850efeacf3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-600 Malicious code in mini-suggest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-519 Malicious code in images-inliner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab908bfacc86cb5a85edab7717c02f6e58433afd880e9928e8c67114b7af43e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-690 Malicious code in postcss-file-match (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 416239cd07c736ee9cda1661d413016b66a35ccd99054f13c8fb5b81fefa02dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...