Malicious code in quito-spectroscopy-forever-fornax (npm)

The package quito-spectroscopy-forever-fornax was found to contain malicious code...

MAL-2025-20776 Malicious code in forever-apex-vega-neptune (npm)

The package forever-apex-vega-neptune was found to contain malicious code...

MAL-2025-20777 Malicious code in forever-astrochemistry-mysql-archaeogenetics (npm)

The package forever-astrochemistry-mysql-archaeogenetics was found to contain malicious code...

MAL-2025-18164 Malicious code in decoherence-pulsar-eclipse-forever (npm)

The package decoherence-pulsar-eclipse-forever was found to contain malicious code...

MAL-2025-34333 Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

MAL-2025-38457 Malicious code in virtualreality-forever-parsec-eridanus (npm)

The package virtualreality-forever-parsec-eridanus was found to contain malicious code...

MAL-2025-26001 Malicious code in materialize-europa-forever-dependencies (npm)

The package materialize-europa-forever-dependencies was found to contain malicious code...

MAL-2025-20778 Malicious code in forever-bellatrix-chromedriver-stream (npm)

The package forever-bellatrix-chromedriver-stream was found to contain malicious code...

MAL-2025-27165 Malicious code in nebula-forever-subduction-playwright (npm)

The package nebula-forever-subduction-playwright was found to contain malicious code...

MAL-2025-39697 Malicious code in xenos-leda-hugo-forever (npm)

The package xenos-leda-hugo-forever was found to contain malicious code...

MAL-2025-16358 Malicious code in bunyan-yildun-forever-proxima (npm)

The package bunyan-yildun-forever-proxima was found to contain malicious code...

CVE-2022-4879

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

CVE-2024-36554

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allow a malicious user to gain information about the device by sending an SMS to the device which returns sensitive information...

CVE-2024-36556

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

CVE-2024-36558

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication...

CVE-2024-36553

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

CVE-2024-36553

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

CVE-2024-36556

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

CVE-2024-36557

The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to...

Forever CALL ME KW-50 安全漏洞

Forever CALL ME KW-50 is a children's phone watch from Forever. Forever CALL ME KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh version and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.24 A security vulnerability exists in version 22.49.44cobb. An attacker can exploit the vulnerability ...