CVE-2025-49588: External Control of File Name or Path

Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In version 2.10.2, the server accepts links of format file:///etc/passwd and doesn't do any validation before sending them to parsers and playwright, this can result in leak of other...

Malicious code in playwright-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8711293d366c2ab04b98c26ea6e6fbc5022a045727404387dc51c9496cb328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in playwright-coverage

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @bmwfedev/playwright-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-26683

Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-26683

Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-26683 Azure Playwright Elevation of Privilege Vulnerability

...

CVE-2025-26683 Azure Playwright Elevation of Privilege Vulnerability

...

CVE-2025-26683

CVE-2025-26683 describes an improper authorization elevation of privilege in Microsoft Azure Playwright that can be exploited by an unauthenticated attacker over the network. Multiple sources consistently identify it as a network-based privilege-escalation issue affecting Azure Playwright, with t...

Azure Playwright Elevation of Privilege Vulnerability

Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...

Microsoft Azure Playwright Authorization Issue Vulnerability

Microsoft Azure Playwright is an open source framework for automated web application testing from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Azure Playwright that stems from improper authorization and could allow an unauthorized attacker to elevate...

CVE-2025-26683: Improper Authorization

Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...

KLA82171 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Playwright can be exploited remotely to gain...

PT-2025-13856 · Microsoft · Azure Playwright

Name of the Vulnerable Software and Affected Versions: Azure Playwright affected versions not specified Description: The issue is related to improper authorization in Azure Playwright, allowing an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, there is...

Malicious code in accept-a-payment-playwright-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a7c8fcfc301cd02159a59241fc90d212ace8d247570cbdd7b66adffd6579d05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-56800: Server-Side Request Forgery (SSRF)

Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery SSRF vulnerability. The scraping engine could be exploited by crafting a malicious site that redirects to a local IP address...

MAL-2024-12021 Malicious code in playwright-1.48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c425d60dd5426771b56cc598b6cb55fffa7b0444728b06e2d6126389582b0707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in playwright-1.48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c425d60dd5426771b56cc598b6cb55fffa7b0444728b06e2d6126389582b0707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in playwright-1.45

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11774 Malicious code in playwright-1.47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 838a2bf47ce546affea44fb08edc2964e2c467300c9028a29fc869db92f92a23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...