EUVD-2026-67323

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...

PT-2026-82784

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...

CVE-2026-75339

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...

Malicious code in bnpl-blocks-atom-desktop-bnpl-dangerously-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67ae3d6b9d42c80691f5be62d2b59d087b9457657a5fa12d4881c2db7c1aa5d On require of the package, index.js loads./ext.js, which reassembles C2 hostnames from split string fragments e.g. 'oob-worker.cf10x-.workers.dev'...