CVE-2018-25082 zwczou WeChat SDK Python to_xml xml external entity reference

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patc...

CVE-2018-25082 zwczou WeChat SDK Python to_xml xml external entity reference

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patc...

CVE-2018-25082

CVE-2018-25082 affects zwczou WeChat SDK Python 0.3.0. Root cause: XML External Entity (XXE) reference via validate/to_xml, enabling remote manipulation. Impact as described: potential impact on confidentiality, integrity, and availability due to unresolved external entities. Public details indic...

Silicon Labs Wi-SUN SDK 安全漏洞

Silicon Labs Wi-SUN SDK is an industry-leading software stack and development tool for Wi-SUN application development from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs Wi-SUN SDK v1.5.0 and earlier versions, which stems from an issue with the MAC layer security of the...

PT-2023-16845 · Silicon · Wi-Sun Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs Wi-SUN SDK versions 1.5.0 and earlier Description: The issue is related to missing MAC layer security, which allows a malicious node to route malicious messages through the network. Recommendations: For Silicon Labs Wi-SUN SDK...

PT-2023-10823

Name of the Vulnerable Software and Affected Versions zwczou WeChat SDK Python versions 0.3.0 through 0.5.4 Description A critical issue affects the validate/to xml function, leading to xml external entity reference. The attack may be initiated remotely. Recommendations To address this issue,...

Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ Technology Edition affect IBM Workload Scheduler.

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition potentially affect IBM Workload Scheduler. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2022-21628 DESCRIPTION: Java SE is vulnerable to a denial of service, caused by a flaw in the Lightweight HTTP Server...

unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.32-alt1

3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - .NET Core 3.1.32 and .NET Core SDK 3.1.426 releases - CVE-2022-41089: .NET Remote Code Execution Vulnerability - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial o...

New GoLang-Based HinataBot Exploiting Router and Server Flaws for DDoS Attacks

A new Golang-based botnet dubbed HinataBot has been observed to leverage known flaws to compromise routers and servers and use them to stage distributed denial-of-service DDoS attacks. "The malware binaries appear to have been named by the malware author after a character from the popular anime...

.NET 6.0 bugfix update

An update is available for dotnet6.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

MAL-2023-117 Malicious code in azure-sdk-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab63a2e65735bf69a56d323b1f5f75f5a931d4eed13e9fd4468e38047adb773a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-sdk-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab63a2e65735bf69a56d323b1f5f75f5a931d4eed13e9fd4468e38047adb773a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

agent-memory-layer (>=0.1.0, <=0.1.1), hana-ai (>=1.0.25122300, <=1.1.26072400) +2 more potentially affected by CVE-2023-25617 via sap-ai-sdk-base (>=3.1.2, <=3.4.0)

sap-ai-sdk-base PYPI version =3.1.2, =0.1.0, =1.0.25122300, =3.0.3, =5.3.4, =7.2.0 Source cves: CVE-2023-25617 Source advisory: SNYK:PYTHON-SAPAISDKBASE-17670581...

GHSA-XXHH-59GH-6FFX SAP Cloud SDK for AI Python has OS Command Injection when Program Objects Execution is Enabled

SAP Business Object Adaptive Job Server - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the...

Command Injection

Overview sap-ai-sdk-base is a SAP Cloud SDK for AI Python: Base Client Affected versions of this package are vulnerable to Command Injection via the Program Objects Execution process. An attacker can execute arbitrary operating system commands by leveraging authenticated access with scheduling...

CVE-2023-25617

SAP Business Object Adaptive Job Server - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the...

Design/Logic Flaw

SAP Business Object Adaptive Job Server - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the...