Malicious code in svg-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542aa371fe6b513dabed7c4f9b5646a104520afa686c6b33abedc21d120ea25f index.js exports getPlugin, which fetches JSON from the hardcoded endpoint https://svganchordev.net/icons/106 and passes the response field...

TeamWork Job Links profileChange and coverChange arbitrary file upload vulnerability (CNVD-2017-33670)

TeamWork Photo Fusion is a web-based photo management system that allows users to upload photos or view other users' photos. changeAvatar and changeCover are both functional modules. changeAvatar is a module for changing a user's avatar. changeCover is a module for changing a cover. changeAvatar ...