Agiloft 安全漏洞

Agiloft is a contract management platform from Agiloft Corporation in the United States. A security vulnerability exists in Agiloft that stems from XML external entity injection and could lead to path traversal...

MAL-2025-42030 Malicious code in msmg-frontend-task (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41910 Malicious code in @espace-client-axafr/user-profile (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41895 Malicious code in @espace-client-axafr/savings-card (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41899 Malicious code in @espace-client-axafr/savings-webservices (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41884 Malicious code in @espace-client-axafr/redirection-angel (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41868 Malicious code in @espace-client-axafr/mes-documents-contrat (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41883 Malicious code in @espace-client-axafr/popin-resilience (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41874 Malicious code in @espace-client-axafr/page-details-contrat (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41842 Malicious code in @espace-client-axafr/certificate-auto (npm)

The package communicates with a domain associated with malicious activity...

Safeguarding VS Code against prompt injections

The Copilot Chat extension for VS Code has been evolving rapidly over the past few months, adding a wide range of new features. Its new agent mode lets you use multiple large language models LLMs, built-in tools, and MCP servers to write code, make commit requests, and integrate with external...

CVE-2025-29515

creationtimestamp| type| source ---|---|--- 2025-08-25 14:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115089854128473964...

Linux Distros Unpatched Vulnerability : CVE-2017-8315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the...

Linux Distros Unpatched Vulnerability : CVE-2017-15691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prio...

Linux Distros Unpatched Vulnerability : CVE-2017-12082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open- source 3d creation suite. A .blend file with a...

Linux Distros Unpatched Vulnerability : CVE-2016-3720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impa...

Linux Distros Unpatched Vulnerability : CVE-2015-1832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML external entity XXE vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows...

ROS-20250825-02

A vulnerability in the Nokogiri program library of the Ruby interpreter is related to improper handling of an an unexpected data type. Exploitation of the vulnerability could allow an attacker, acting remotely, disclose protected information or cause a denial of service A vulnerability in the...

Linux Distros Unpatched Vulnerability : CVE-2016-5000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity...

Linux Distros Unpatched Vulnerability : CVE-2016-4434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE...