Malicious code in korvica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065729796ad9ceb2c9939587ce1f61b78bdf36fc13807ace7e2383c22f5e61ba On import, a top-level async IIFE in index.mjs gates on process.platform === 'linux' and NODEENV!== 'production', checks for a WSL host mount at...

MAL-2026-11150 Malicious code in streak-daily-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8664341251bd6864f5aaf9692c5b7bd0945125853bc304c91709aaa335be38f1 On import of index.mjs, setImmediate invokes a syncWorkspace routine whose network destination and paths are reconstructed at runtime from hex-encode...

osTicket Login Panel - Detect

osTicket login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """osTicket login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'osTicket Login Panel - Detect', 'description':...

WebPageTest Login Panel - Detect

WebPageTest login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WebPageTest login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WebPageTest Login Panel - Detect', 'description...

Webroot Login Panel - Detect

Webroot login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webroot login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webroot Login Panel - Detect', 'description': 'Webroot...

Webuzo Admin Login Panel - Detect

Webuzo admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webuzo admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webuzo Admin Login Panel - Detect',...

Web Local Craft Terminal Login Panel - Detect

Web Local Craft Terminal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web Local Craft Terminal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Local Craft...

WireGuard Easy (wg-easy) - Login Panel Detection

wg-easy is the easiest way to run WireGuard VPN with a web-based admin UI. It exposes a management interface for creating and managing WireGuard peers. !/usr/bin/env python3 -- coding: utf-8 -- """wg-easy is the easiest way to run WireGuard VPN with a web-based admin UI.""" from kittysploit impor...

Wildfly - Default Admin Login Detection

Wildfly default admin login credentials were successful. !/usr/bin/env python3 -- coding: utf-8 -- """Wildfly default admin login credentials were successful.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wildfly -...

VMware Workspace ONE UEM Airwatch Login Panel - Detect

VMware Workspace ONE UEM Airwatch login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Workspace ONE UEM Airwatch login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

VMware Workspace ONE UEM Airwatch Self-Service Portal - Detect

VMware Workspace ONE UEM Airwatch Self-Service Portal SSP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Workspace ONE UEM Airwatch Self-Service Portal SSP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

WordPress Adivaha Travel Plugin 2.3 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing a...

WordPress All-in-One Security <=4.4.1 - Open Redirect Detection

WordPress All-in-One Security plugin through 4.4.1 contains an open redirect vulnerability which can expose the actual URL of the hidden login page feature. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

Xeams Admin Console Login Panel - Detect

Xeams Admin Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xeams Admin Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xeams Admin Console Login Panel...

Xenmobile Console Login Panel - Detect

Xenmobile Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xenmobile Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xenmobile Console Login Panel -...

XVR Login Panel - Detect

XVR login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XVR login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XVR Login Panel - Detect', 'description': 'XVR login panel was...

Xweb500 Login Panel - Detect

Xweb500 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xweb500 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xweb500 Login Panel - Detect', 'description': 'Xweb500...

Yacht Login Panel - Detect

Yacht is a web management platform for managing Docker containers. !/usr/bin/env python3 -- coding: utf-8 -- """Yacht is a web management platform for managing Docker containers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Z-BlogPHP Admin Login Panel - Detect

Z-BlogPHP admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Z-BlogPHP admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Z-BlogPHP Admin Login Panel - Detect',...