ManageEngine ServiceDesk Plus < 14.1 Build 14105 XXE

An XML external entity vulnerability exists in ManageEngine ServiceDesk Plus prior to 14.1 Build 14105. A threat actor with the SDAdmin role can configure a malicious server to return a response with a malformed XML using the Reports integration API, causing an XML External Entity XXE attack. Not...

MAL-2022-1901 Malicious code in chrome-ssh-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba428b9ebe2369390d5f53d0a930ddd41afab160b3f87a15471b2c4476d4c300 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...