EUVD-2021-2083

Malware in sbrugna...

EUVD-2019-8013

Malware in sbrugna...

EUVD-2023-1397

Malicious code in bioql PyPI...

EUVD-2023-1401

Malicious code in bioql PyPI...

EUVD-2022-1980

Malicious code in bioql PyPI...

EUVD-2023-30091

Malicious code in bioql PyPI...

EUVD-2024-1944

Malicious code in bioql PyPI...

EUVD-2022-1656

Malicious code in bioql PyPI...

EUVD-2022-4142

Malicious code in bioql PyPI...

EUVD-2023-2836

Malicious code in bioql PyPI...

EUVD-2024-0159

Malicious code in bioql PyPI...

EUVD-2024-3208

Malicious code in bioql PyPI...

EUVD-2022-5522

Malicious code in bioql PyPI...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache XML Security for Java.

Summary Multiple vulnerabilities in Apache XML Security for Java that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2024-20945 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a local authenticated attacker...

BIT-NIFI-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

Linux Distros Unpatched Vulnerability : CVE-2024-34580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing XMLDsig specification without protection against an SSRF payload in...

The vulnerability of the parseDocument function of the cross-platform tool for working with databases in DBeaver allows attackers to execute XXE attacks.

The vulnerability of the parseDocument function of the cross-platform tool for working with DBeaver databases is related to an error in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2025-54380 Opencast still publishes global system account credentials

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to version 17.6, Opencast would incorrectly send the hashed global system account credentials ie: org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass...

PT-2025-26805 · Git +1 · Xmlsec

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The software is susceptible to a heap-buffer-overflow write issue. The crash state involves the functions xmlParsePubidLiteral, xmlParseExternalID, and xmlParseNotationDecl. Recommendations...

CVE-2024-34580

Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing XMLDsig specification without protection against an SSRF payload in a KeyInfo element. NOTE: the project disputes this CVE Record on the grounds that any vulnerabilities are the result of a failure to...