CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery

A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embedding/test. The manipulation of the argument baseUrl results in server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery

A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embedding/test. The manipulation of the argument baseUrl results in server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery

A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embedding/test. The manipulation of the argument baseUrl results in server-side request forgery. The attack can be launched remotely. The exploit has been...

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

Car makers don't trust blueprints. They smash prototypes into walls. Again and again. In controlled conditions. Because design specs don't prove survival. Crash tests do. They separate theory from reality. Cybersecurity is no different. Dashboards overflow with "critical" exposure alerts...

MAL-2025-47740 Malicious code in vega-morphcharts-test-es6 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in test-grabber-package-xyz789 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47731 Malicious code in test-grabber-package-xyz789 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47691 Malicious code in my-test-yuyuy (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in my-test-yuyuy (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in kotlin-wasm-package-lock-project-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in com.unity.test-framework.utp-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47643 Malicious code in com.unity.test-framework.utp-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in com.unity.test-framework.graphics.performance (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47642 Malicious code in com.unity.test-framework.graphics.performance (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in com.unity.test-framework.build (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47629 Malicious code in com.unity.external.test-protocol (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in com.unity.external.test-protocol (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47867 Malicious code in rack-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486f75e4ca656b6182f940e14f4a16bb48bef108e68163afe3f0ecb9d65465ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rack-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486f75e4ca656b6182f940e14f4a16bb48bef108e68163afe3f0ecb9d65465ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-prob-to2324 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4628b79fab4d286704a53af4e8df8cc72149ff0b04b72d4a8ec23983ed62f92d The OpenSSF Package Analysis project identified 'test-prob-to2324' @...