graphql-playground

It is an offensive tool for GraphQL. This repository contains a proof-of-concept PoC exploit for a vulnerability in the GraphQL Playground, a popular IDE for GraphQL development. The exploit targets an XSS Reflection attack vulnerability in the graphql-playground-html package, which was resolved ...

graphql-playground

This repository is an offensive tool for GraphQL. It is a GraphQL IDE for better development workflows, featuring context-aware autocompletion and error highlighting, interactive, multi-column docs, and support for real-time GraphQL Subscriptions. The tool is vulnerable to an XSS Reflection attac...

Intel AI Playground Improper Privilege Vulnerability

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

MCPSecBench: a Systematic Security Benchmark and Playground for Testing Model Context Protocols

Large Language Models LLMs are increasingly integrated into real-world applications via the Model Context Protocol MCP, a universal, open standard for connecting AI agents with data sources and external tools. While MCP enhances the capabilities of LLM-based agents, it also introduces new securit...

Malicious code in mjb-playground-publishing-a-npm-module (npm)

The package mjb-playground-publishing-a-npm-module was found to contain malicious code...

Malicious code in mjb-playground-module-as-cli-tool (npm)

The package mjb-playground-module-as-cli-tool was found to contain malicious code...

Malicious code in playground-wizard (npm)

The package playground-wizard was found to contain malicious code...

MAL-2025-8079 Malicious code in @jquense/component-playground (npm)

The package @jquense/component-playground was found to contain malicious code...

MAL-2025-34288 Malicious code in swift-playground-builder (npm)

The package swift-playground-builder was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7497eaf30807c4afb0f3fa20c31f6d49765e5e6ba1af3087e06e22a7b21a6ec1 This package installs a dependency hosted on a custom domain tha...

MAL-2025-26515 Malicious code in mjb-playground-module-as-cli-tool (npm)

The package mjb-playground-module-as-cli-tool was found to contain malicious code...

Malicious code in @jquense/component-playground (npm)

The package @jquense/component-playground was found to contain malicious code...

Malicious code in swift-playground-builder (npm)

The package swift-playground-builder was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7497eaf30807c4afb0f3fa20c31f6d49765e5e6ba1af3087e06e22a7b21a6ec1 This package installs a dependency hosted on a custom domain tha...

MAL-2025-29386 Malicious code in playground-wizard (npm)

The package playground-wizard was found to contain malicious code...

MAL-2025-26516 Malicious code in mjb-playground-publishing-a-npm-module (npm)

The package mjb-playground-publishing-a-npm-module was found to contain malicious code...

CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27559

The CVE-2025-27559 entry documents a privilege escalation risk in Intel AI Playground software prior to version v2.3.0 alpha due to incorrect default permissions. The vulnerability can be triggered by an authenticated user with local access, enabling elevation of privileges and impacting confiden...

CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel AI Playground 安全漏洞

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...