535 matches found
Azure Playwright Elevation of Privilege Vulnerability
Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...
Microsoft Azure Playwright 授权问题漏洞
Microsoft Azure Playwright is an open source framework for automated web application testing from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Azure Playwright that stems from improper authorization and could allow an unauthorized attacker to elevate...
CVE-2025-26683: Improper Authorization
Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...
KLA82171 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Playwright can be exploited remotely to gain...
PT-2025-13856 · Microsoft · Azure Playwright
Name of the Vulnerable Software and Affected Versions: Azure Playwright affected versions not specified Description: The issue is related to improper authorization in Azure Playwright, allowing an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, there is...
Malicious code in accept-a-payment-playwright-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a7c8fcfc301cd02159a59241fc90d212ace8d247570cbdd7b66adffd6579d05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-56800: Server-Side Request Forgery (SSRF)
Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery SSRF vulnerability. The scraping engine could be exploited by crafting a malicious site that redirects to a local IP address...
MAL-2024-12021 Malicious code in playwright-1.48 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c425d60dd5426771b56cc598b6cb55fffa7b0444728b06e2d6126389582b0707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in playwright-1.48 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c425d60dd5426771b56cc598b6cb55fffa7b0444728b06e2d6126389582b0707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11774 Malicious code in playwright-1.47 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 838a2bf47ce546affea44fb08edc2964e2c467300c9028a29fc869db92f92a23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in playwright-1.47 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 838a2bf47ce546affea44fb08edc2964e2c467300c9028a29fc869db92f92a23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11773 Malicious code in playwright-1.46 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b54a73f91f92e3252ca7711496e9a2cc0e1eabd2637f94a2bfdce96d1a94791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in playwright-1.46 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b54a73f91f92e3252ca7711496e9a2cc0e1eabd2637f94a2bfdce96d1a94791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in playwright-1.45 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60a2a7e0e26a3252aaec3534c214513245613c9850f72abbdefc21de170d304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11772 Malicious code in playwright-1.45 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60a2a7e0e26a3252aaec3534c214513245613c9850f72abbdefc21de170d304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-internal-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1777e495156cf7146557c4b12278bbf9af5efe01c047f211bda8e66eb5503f8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10659 Malicious code in eslint-plugin-internal-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1777e495156cf7146557c4b12278bbf9af5efe01c047f211bda8e66eb5503f8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for CVE-2024-39700
CVE-2024-39700 Proof of Concept Repositories created using th...
CVE-2024-39919 Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png
@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. The package includes an ALLOWLIST where the host can specify which services the user is permitted to capture screenshots of. By...
CVE-2024-39919 Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png
@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. The package includes an ALLOWLIST where the host can specify which services the user is permitted to capture screenshots of. By...