Malicious code in oasis-q3an5-xfmxa-nymph-project (npm)

The package oasis-q3an5-xfmxa-nymph-project was found to contain malicious code...

MAL-2025-28311 Malicious code in opaline_jjrni_3ms2f_oasis (npm)

The package opalinejjrni3ms2foasis was found to contain malicious code...

MAL-2025-28012 Malicious code in oasis-xvbad-abn2r-quill-project (npm)

The package oasis-xvbad-abn2r-quill-project was found to contain malicious code...

MAL-2025-28010 Malicious code in oasis-wallet (npm)

The package oasis-wallet was found to contain malicious code...

MAL-2025-28005 Malicious code in oasis-59qsj-xdrzi-jade-project (npm)

The package oasis-59qsj-xdrzi-jade-project was found to contain malicious code...

MAL-2025-37853 Malicious code in universe-032yv-eyuue-oasis-project (npm)

The package universe-032yv-eyuue-oasis-project was found to contain malicious code...

MAL-2025-28009 Malicious code in oasis-q3an5-xfmxa-nymph-project (npm)

The package oasis-q3an5-xfmxa-nymph-project was found to contain malicious code...

CVE-2020-11003

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

CVE-2020-13101

In OASIS Digital Signature Services DSS 1.0, an attacker can control the validation outcome i.e., trigger either a valid or invalid outcome for a valid or invalid signature via a crafted XML signature, when the InlineXML option is used. This defeats the expectation of non-repudiation...

Malicious code in oasis-os-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c78b9623607cccee2c32ab0a4090f9758e28614db6074a8a5dce410658c0ae0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2777 Malicious code in oasis-os-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c78b9623607cccee2c32ab0a4090f9758e28614db6074a8a5dce410658c0ae0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oasis-os-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0855cc5a073138729aaaff78692f8f6b631c4466abbd62dc4a8d7407b86ea5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2346 Malicious code in oasis-os-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0855cc5a073138729aaaff78692f8f6b631c4466abbd62dc4a8d7407b86ea5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ANY.RUN Upgrades Threat Intelligence to Identify Emerging Threats

Dubai Silicon Oasis, United Arab Emirates, 3rd October 2024, CyberNewsWire...

WordPress Oasis theme <= 1.0.12 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Oasis versions = 1.0.12...

WordPress Oasis Theme <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF)

Software Oasis Type Theme Vulnerable versions = 1.0.12 Fixed in 1.0.13 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34810 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8b08e286b6b8 Credits Dhabaleshwar Das Required...

orkneyoasis.com Cross Site Scripting vulnerability OBB-3919214

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 40 Update: xerces-j2-2.12.2-10.fc40

Welcome to the future! Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface XNI, a complete framework for building parser components and configurations that is extremely modul...

Central Dogma Authentication Bypass Vulnerability via Session Leakage

Vulnerability Overview A vulnerability has been identified in Central Dogma versions prior to 0.64.1, allowing for the leakage of user sessions and subsequent authentication bypass. The issue stems from a Cross-Site Scripting XSS attack vector that targets the RelayState of Security Assertion...

oasis-open.org Cross Site Scripting vulnerability OBB-3826333

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...