Malicious code in rocket-antares-impulse-envconfig (npm)

The package rocket-antares-impulse-envconfig was found to contain malicious code...

Malicious code in nebula-warp-testcafe-impulse (npm)

The package nebula-warp-testcafe-impulse was found to contain malicious code...

MAL-2025-23091 Malicious code in impulse-cluster-gravitationalwave-resolvers (npm)

The package impulse-cluster-gravitationalwave-resolvers was found to contain malicious code...

MAL-2025-27187 Malicious code in nebula-warp-testcafe-impulse (npm)

The package nebula-warp-testcafe-impulse was found to contain malicious code...

MAL-2025-25067 Malicious code in leda-middleware-pm2-impulse (npm)

The package leda-middleware-pm2-impulse was found to contain malicious code...

Malicious code in impulse-cluster-gravitationalwave-resolvers (npm)

The package impulse-cluster-gravitationalwave-resolvers was found to contain malicious code...

MAL-2025-27084 Malicious code in nashira-impulse-pavo-photon (npm)

The package nashira-impulse-pavo-photon was found to contain malicious code...

MAL-2025-28227 Malicious code in on-impulse-gulp-abiogenesis (npm)

The package on-impulse-gulp-abiogenesis was found to contain malicious code...

MAL-2025-17386 Malicious code in comet-impulse-testcafe-restart (npm)

The package comet-impulse-testcafe-restart was found to contain malicious code...

Sec5GLoc: Securing 5G Indoor Localization Via Adversary-Resilient Deep Learning Architecture

Emerging 5G millimeter-wave and sub-6 GHz networks enable high-accuracy indoor localization, but security and privacy vulnerabilities pose serious challenges. In this paper, we identify and address threats including location spoofing and adversarial signal manipulation against 5G-based indoor...

AudioJailbreak: Jailbreak Attacks against End-To-End Large Audio-Language Models

Jailbreak attacks to Large audio-language models LALMs are studied recently, but they achieve suboptimal effectiveness, applicability, and practicability, particularly, assuming that the adversary can fully manipulate user prompts. In this work, we first conduct an extensive experiment showing th...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an audio memory corruption when processing IIR configuration data from an AFE calibration block...

Beware: 1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme

A previously undetected cryptocurrency scam has leveraged a constellation of over 1,000 fraudulent websites to ensnare users into a bogus rewards scheme since at least January 2021. "This massive campaign has likely resulted in thousands of people being scammed worldwide," Trend Micro researchers...

Impulse Team’s Massive Years-Long Mostly-Undetected Cryptocurrency Scam

We have been able to uncover a massive cryptocurrency scam involving more than a thousand websites handled by different affiliates linked to a program called Impulse Project, run by a threat actor named Impulse Team...

SUSE CVE-2006-3668

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...

SUSE CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

SUSE CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

SUSE CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

SUSE CVE-2013-2917

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the...

Schism Tracker: Multiple vulnerabilities

Background Schism Tracker is a free implementation of Impulse Tracker, a tool used to create high quality music. Description Multiple vulnerabilities have been discovered in Schism Tracker. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...