309 matches found
CVE-2025-60935
An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a crafted URL. This issue affects the nexturl parameter in the login endpoint and could lead to phishing or token theft after successful authentication...
CVE-2025-60935
An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a crafted URL. This issue affects the nexturl parameter in the login endpoint and could lead to phishing or token theft after successful authentication...
CVE-2025-60935
CVE-2025-60935 describes an open redirect in Blitz Panel v1.17.0 at the login endpoint, affecting the next_url parameter. The vulnerability can enable a user to be redirected to a malicious domain after login, with potential phishing or token theft after authentication. Multiple connected sources...
PT-2025-53299
Name of the Vulnerable Software and Affected Versions Blitz Panel version 1.17.0 Description An open redirect issue exists in the login functionality of Blitz Panel. The issue is located in the /login endpoint and involves the next url parameter. Successful exploitation could allow an attacker to...
EUVD-2025-176034
Malicious code in technosignature-wezen-blitz-blazar npm...
EUVD-2025-180330
Malicious code in ariel-blitz-rocket-concurrently npm...
Malicious code in miranda-postcss-blitz-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea79ab04fc3a6ac4cbf5514fff31c3ed5fba441933ff5d9a861ea695d6fed4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in firebase-selenology-blitz-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179008
Malicious code in event-biogeochemistry-blitz-eris npm...
EUVD-2025-179728
Malicious code in cladistics-crust-blitz-delphinus npm...
EUVD-2025-177799
Malicious code in miranda-postcss-blitz-module npm...
EUVD-2025-178386
Malicious code in install-enif-blitz-supervisor npm...
EUVD-2025-180023
Malicious code in blitz-materialize-link-lint-staged npm...
MAL-2025-185558 Malicious code in ariel-blitz-rocket-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb285d99f4b49e9979cd77120e8d94e6e4991534997b5ca1d327e51aa6b78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186154 Malicious code in cladistics-crust-blitz-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c316f4e58246fa52759b2c006660c1ca9ee997f2706fb365c7d763fa3baf2b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177441
Malicious code in ophiuchus-europa-charon-blitz npm...
EUVD-2025-176934
Malicious code in public-perseus-zenith-blitz npm...
EUVD-2025-180022
Malicious code in blitz-nuxtjs-cosmicray-paleoceanography npm...