Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in devplatform-cli-plugin-test (npm)

Source: amazon-inspector 307cdf72132de0cbce8bbbe7fd65b7c89d9c879fd917ff6a9e06e41ff56d299e On require, runtime.js selects a platform-specific asset, downloads a binary over https.get from hardcoded Cloudflare Workers hosts with a DNS TXT base64 fallback under dl.wel1.ru, writes it to /var/tmp or...

CVE-2026-56342

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

PT-2026-51174

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 27.1 Description Authenticated administrators can perform server-side request forgery SSRF—a flaw where a server is tricked into making requests to an unintended location—via the 'plugin/Live/test.php' endpoint. The...

CVE-2026-33502 AVideo has Unauthenticated SSRF via plugin/Live/test.php

WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated server-side request forgery vulnerability in plugin/Live/test.php allows any remote user to make the AVideo server send HTTP requests to arbitrary URLs. This can be used to probe...

EUVD-2019-9107

Malware in sbrugna...

CVE-2019-19486

Local File Inclusion in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to traverse paths via a plugin test...

VulnCheck KEV: CVE-2020-24901

The default installation of Krpano Panorama Viewer version =1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugintest.url...

MAL-2022-5826 Malicious code in rnpm-plugin-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f03d81a04faa9dfa10b651fae3c79fc5a31a92a306baec577cf0253376b277b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in rnpm-plugin-test

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in rnpm-plugin-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f03d81a04faa9dfa10b651fae3c79fc5a31a92a306baec577cf0253376b277b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5212 Malicious code in parcel-plugin-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ef2e3039d8e848c3a238d4518c7b994f9d2999e032bfa53ecffe34326985e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parcel-plugin-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ef2e3039d8e848c3a238d4518c7b994f9d2999e032bfa53ecffe34326985e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in parcel-plugin-test

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

org.jetbrains.kotlin:kotlin-maven-plugin-test (0.13.1516), org.jetbrains.kotlin:kotlin-reflect (0.13.1516) +2 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.13.1516)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.13.1516 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kotlin-maven-plugin-test 0.13.1516 -...

org.jetbrains.kotlin:kdoc (0.7.1217), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.1217) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.1217)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.1217 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.1217 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.1217 -...

org.jetbrains.kotlin:kdoc (0.8.484), org.jetbrains.kotlin:kdoc-maven-plugin (0.8.484) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.8.484)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.8.484 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.8.484 - org.jetbrains.kotlin:kdoc-maven-plugin 0.8.484 -...

org.jetbrains.kotlin:kdoc (0.8.1527), org.jetbrains.kotlin:kdoc-maven-plugin (0.8.1527) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.8.1527)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.8.1527 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.8.1527 - org.jetbrains.kotlin:kdoc-maven-plugin 0.8.1527 -...

org.jetbrains.kotlin:kdoc (0.7.191), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.191) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.191)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.191 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.191 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.191 -...

org.jetbrains.kotlin:kdoc (0.7.802), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.802) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.802)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.802 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.802 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.802 -...