MAL-2023-197 Malicious code in codeceptjs-browserstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 803e944b4406063368c8940d7f34221d26b1855be2d200abb731f20d97def026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeceptjs-browserstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 803e944b4406063368c8940d7f34221d26b1855be2d200abb731f20d97def026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ai.preferred:venom (>=4.0.1 <=4.2.7), at.ganzleicht.vaadin:vaadin-client-compiler (>=9.1.1 <=9.1.3) +2100 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (>=1.14 <=2.9)

net.sourceforge.htmlunit:htmlunit MAVEN version =1.14, =4.0.1, =9.1.1, =1.0.0, =1.0.0, =1.0.0, =0.0.2, =1, =2.0, =0.9.6, =0.9.6, =0.1.1, =0.5.0, =0.11.1, =0.30.0 and more Source cves: CVE-2023-26119 Source advisory: SNYK:JAVA-NETSOURCEFORGEHTMLUNIT-3252500...

HybridTestFramework - End To End Testing Of Web, API And Security

Full-fledged WEB, API and Security testing framework using selenium,ZAP OWASP proxy and rest-assured Supported Platforms This framework supports WebUi automation across a variety of browsers like Chrome, Firefox, IE, no only limited to this but extended to test rest api, security and visual...

anvil-connect (>=0.1.0 <=0.1.39), anvil-connect-jwt (>=0.1.0 <=0.1.2) +49 more potentially affected by CVE-2017-16021 via uri-js (>=1.4.2 <=2.1.1)

uri-js NPM version =1.4.2, =0.1.0, =0.1.0, =0.1.0, =0.2.12, =1.15.0, =0.1.0, =0.1.2, =0.4.2, =1.0.0, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2017-16021 Source advisory: OSV:GHSA-333W-RXJ3-F55R...

browserstack.com XSS vulnerability

Vulnerable URL: https://www.browserstack.com/careers/san-francisco-'accesskey='x'onclick='alert"XSSPOSED" Details: Description| Value ---|--- Patched:| Yes, at 29.08.2017 Latest check for patch:| 29.08.2017 05:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...