Dangerous JS Functions
- Risk:
Low
- Type:
- Passive
- CWE:
- CWE-749
- Summary
A dangerous JS function seems to be in use that would leave the site vulnerable.
- Solution
See the references for security advice on the use of these functions.
- References
Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts
Mozilla Patches Critical Firefox Bug Similar to Chrome's Recent Zero-Day Vulnerability
Hijacked Microsoft Stream classic domain spams SharePoint sites
Infostealer campaign compromises 10 npm packages, targets devs
Chinese FamousSparrow hackers deploy upgraded malware in attacks
Windows 11 KB5053656 update released with 38 changes and fixes
Microsoft: New Windows scheduled task will launch Office apps faster
New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims' DNS Email Records
Mozilla warns Windows users of critical Firefox sandbox escape flaw
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability
CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability
CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability
InformationalGET for POST
MediumELMAH Information Leak
Free online web security scanner