Malicious code in test-account-portal-fe (npm)

Source: ossf-package-analysis 5dd02103458df4faa2c37da43a76a468a0a22d591fb77c5d756e7d7496d68907 The OpenSSF Package Analysis project identified 'test-account-portal-fe' @ 100.100.102 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in test-account-portal-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63911c5f393d2276fffe11b7d465b04704722dc852a79fbfbd63b5f8dbd812b8 Package [email protected] exhibits the canonical dependency-confusion probe shape: an internal-sounding name published at an...

MAL-2026-17748 Malicious code in test-account-portal-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63911c5f393d2276fffe11b7d465b04704722dc852a79fbfbd63b5f8dbd812b8 Package [email protected] exhibits the canonical dependency-confusion probe shape: an internal-sounding name published at an...

Build Numbers and Versions of Veeam Plug-In for Platform9

This KB article lists all versions of the Veeam Plug-In for Platform9 and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Platform9 1 Releases Veeam Plug-In for Platform9 1.0 Included with Veeam Backup & Replication 13.1 |...

PT-2026-67595

Summary POST /api/v2/email on the account portal account.budibase.app starts an email-change workflow using a client-supplied accountId that is not validated against the authenticated session. A logged-in attacker supplies a victim's accountId and an email address they control; the verification...

CVE-2025-69614

Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-10-31...

CVE-2025-69615

Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-24, fixed 2025-11-03...

EUVD-2019-14219

Malware in sbrugna...

Malware in @account-portal/ui-toolkit-react

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @account-portal/ui-toolkit-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8071d62a3309d3670bd962154aedbcb3fcfad9e85579f6fe36be0fccbd5feb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47130 Malicious code in @account-portal/ui-toolkit-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8071d62a3309d3670bd962154aedbcb3fcfad9e85579f6fe36be0fccbd5feb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in customer-account-portal (npm)

The package customer-account-portal was found to contain malicious code...

MAL-2025-17838 Malicious code in customer-account-portal (npm)

The package customer-account-portal was found to contain malicious code...

CVE-2025-48958

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by...

CVE-2025-48958

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by...

CVE-2025-48958

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by...

CVE-2025-48958 Froxlor has an HTML Injection Vulnerability

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by...

CVE-2025-48958: Improper Neutralization of Input During Web Page Generation

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by...

Froxlor 跨站脚本漏洞

Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.2.6 that stems from an HTML injection flaw in the Customer Account Portal that could lead to phishing attacks...

Froxlor has an HTML Injection Vulnerability

Summary An HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by redirecting users to malicious external websites. The vulnerability has...