CVE-2026-56298 Capgo - EXIF Metadata Exposure in App Information Image Upload

Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can upload images containing EXIF metadata to extract geographic location information and other embedded metadata from uploaded files...

WS-2019-0393

Bb-builder is a malicious package targeting Windows systems and uploads information to a remote server...

CVE-2025-20348

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

PT-2020-21176

Name of the Vulnerable Software and Affected Versions requst affected versions not specified Description The requst package is a typosquatted version of a popular package with a similar name, designed to track users who install the incorrect package. Upon installation, it uploads information to a...

PT-2020-21418

Name of the Vulnerable Software and Affected Versions equest affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads various information to a remote...

Malicious Package in qingting

All versions of qingting contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

Malicious Package in midway-xtpl

All versions of midway-xtpl contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

GHSA-G5Q2-FCG9-J526 Malicious Package in hsf-clients

All versions of hsf-clients contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

GHSA-8M5V-F2WP-WQR9 Malicious Package in ali-contributors

All versions of ali-contributors contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

PT-2020-21566

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including the operating system and hostname, to a remote server. There are no indications of further compromise...

PT-2020-21521

Name of the Vulnerable Software and Affected Versions bb-builder versions affected versions not specified Description The issue concerns malicious code embedded in the bb-builder package, which executes an executable targeting Windows and uploads information to a remote server. Any computer with...

PT-2020-21542

Name of the Vulnerable Software and Affected Versions midway-xtpl versions affected versions not specified Description The issue concerns malicious code in the midway-xtpl package, which uploads system information to a remote server, downloads a file, and executes it. Any computer with this packa...

PT-2020-21057

Name of the Vulnerable Software and Affected Versions secure identity login module affected versions not specified Description The issue concerns malicious code within the secure identity login module that uploads system information to a remote server, downloads a file, and executes it. Any...

PT-2020-21580

Name of the Vulnerable Software and Affected Versions asymc versions affected versions not specified Description The issue concerns a typosquatted package that tracks and uploads user information to a remote server, including the name of the downloaded package, the intended package, the Node...

PT-2020-21493

Name of the Vulnerable Software and Affected Versions asyync affected versions not specified Description The issue concerns a typosquatted package that tracks and uploads user information to a remote server, including the name of the downloaded package, the intended package, the Node version, and...

PT-2020-21327

Name of the Vulnerable Software and Affected Versions requet affected versions not specified Description The requet package is a typosquatted version of a popular package with a similar name, designed to track users who install the incorrect package. Upon installation, it uploads information to a...

PT-2020-21283

Name of the Vulnerable Software and Affected Versions requiest affected versions not specified Description The issue involves a typosquatted package that tracks and uploads user information to a remote server, including the name of the downloaded package, the intended package, the Node version, a...

PT-2020-21178

Name of the Vulnerable Software and Affected Versions requeest versions affected versions not specified Description The issue concerns a typosquatted package named requeest that mimics a popular package of a similar name. Upon installation, it tracks and uploads user information to a remote serve...

PT-2020-21020

Name of the Vulnerable Software and Affected Versions reqquest affected versions not specified Description The issue concerns a typosquatted package named reqquest that tracks and uploads user information to a remote server, including the name of the downloaded package, the intended package name,...

Malicious Package

Overview This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise. References GitHub Advisory...