Malicious code in ai-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064d09133421ca62cdc2479a659b99caf018de8ee41ce090f7c672b8ad474843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-156 Malicious code in ai-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064d09133421ca62cdc2479a659b99caf018de8ee41ce090f7c672b8ad474843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How Can Deliberately Flawed APIs Help In Mastering API Security?

In our recent webinar recent webinar title 'A CISO’s Checklist for Securing APIs and Applications', we delved into the concept of creating an API security playground tailored for both developer and security teams. The core idea revolves around utilizing intentionally vulnerable APIs as training...

How Can Deliberately Flawed APIs Help In Mastering API Security?

In our recent webinar recent webinar title 'A CISO’s Checklist for Securing APIs and Applications', we delved into the concept of creating an API security playground tailored for both developer and security teams. The core idea revolves around utilizing intentionally vulnerable APIs as training...

Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-1038

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

PT-2024-16232 · WordPress · The Beaver Builder

Name of the Vulnerable Software and Affected Versions: The Beaver Builder – WordPress Page Builder plugin for WordPress versions up to, and including, 2.7.4.2 Description: The issue is related to DOM-Based Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping...

playground-hdh.com Improper Access Control vulnerability OBB-3806323

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mysticplayground.com Cross Site Scripting vulnerability OBB-3645801

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-1508 Malicious code in auth0-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4267198f7d6d37ea13e1bdc92116960ceef69ae0ac639131ebf85d223180dd22 The OpenSSF Package Analysis project identified 'auth0-playground' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in auth0-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4267198f7d6d37ea13e1bdc92116960ceef69ae0ac639131ebf85d223180dd22 The OpenSSF Package Analysis project identified 'auth0-playground' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

customplaygrounddesigns.com Cross Site Scripting vulnerability OBB-3569882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

playgroundadventures.net Cross Site Scripting vulnerability OBB-3375011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-G7RJ-Q722-245G jsreport vulnerable to code injection

jsreport prior to 3.11.3 had a version of vm2 vulnerable to CVE-2023-29017 hard coded in the package.json of the jsreport-core component. An attacker can use this vulnerability to obtain the authority of the jsreport playground server, or construct a malicious webpage/html file and send it to the...

PT-2023-20335 · Vm2 +1 · Vm2 +1

Name of the Vulnerable Software and Affected Versions: jsreport versions prior to 3.11.3 Description: The issue is related to code injection in the jsreport GitHub repository. An attacker can exploit this to obtain authority over the jsreport playground server or construct a malicious webpage/htm...

CVE-2023-28109

Play With Docker (browser-based Docker playground) is affected by a CORS configuration vulnerability. Versions 0.0.2 and earlier allow domain hijacking: an attacker can craft requests with Origin header set to evil-play-with-docker.com, causing the server to echo header values in responses and by...

Malicious Package

Overview sxg-playground is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

MAL-2022-4430 Malicious code in lwc-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98e335481687ce6c9f293923692ec4f19da6a49f4d5fe8c014625761fe5a23cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwc-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98e335481687ce6c9f293923692ec4f19da6a49f4d5fe8c014625761fe5a23cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview lwc-playground is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...