MAL-2025-34631 Malicious code in technocracy-dependencies-socketio-hawkingradiation (npm)

The package technocracy-dependencies-socketio-hawkingradiation was found to contain malicious code...

Malicious code in charon-blitz-socketio-nightwatch (npm)

The package charon-blitz-socketio-nightwatch was found to contain malicious code...

Malicious code in dotenv-socketio-ichnology-higgs (npm)

The package dotenv-socketio-ichnology-higgs was found to contain malicious code...

MAL-2025-34224 Malicious code in supervisor-draco-socketio-hapi (npm)

The package supervisor-draco-socketio-hapi was found to contain malicious code...

Malicious code in resonance-socketio-pulsar-meteor (npm)

The package resonance-socketio-pulsar-meteor was found to contain malicious code...

MAL-2025-4943 Malicious code in web3-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@xr3ngine/client-core (>=0.2.15, <=0.2.18), @xr3ngine/client-ml (>=0.2.15, <=0.2.18) +1 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=4.5.9, <=4.5.11)

@feathersjs/socketio NPM version =4.5.9, =0.2.15, =0.2.15, =0.2.18 - @xr3ngine/server-core 0.2.14 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

Striker - A Command And Control (C2)

Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent should you...

Socketio Engine.IO Denial of Service Vulnerability

Engine.IO is a transport-based implementation of Socket.IO's cross-browser/cross-device bi-directional communication layer.A denial-of-service vulnerability exists in versions of Socketio Engine.IO prior to 3.6.1, 4.0.0 and later, and prior to 6.2.1, which stems from a failure to properly handle...

Socketio Socket.io Access Control Error Vulnerability

Socketio Socket.io is a Javascript-based server-side application from the Socketio community that supports event-based bidirectional communication. A security vulnerability exists in socket.io before 2.4.0, which stems from a CORS misconfiguration and is prone to insecure default values...

Socketio Engineio Resource Management Error Vulnerability

Socketio Engineio is a Javascript-based real-time engine for bi-directional communication between browsers and devices from the Socketio community. A security vulnerability exists in socketio socket.io-parser before 3.4.1, which can be exploited by attackers to cause a denial of service memory...

Downloads Resources over HTTP in roslib-socketio

Affected versions of roslib-socketio insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

GHSA-XQ8R-R72R-PQWM Downloads Resources over HTTP in roslib-socketio

Affected versions of roslib-socketio insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

Design/Logic Flaw

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

roslib-socketio code execution vulnerability

roslib-socketio is a ROS Robot Operating System JavaScript support library. A security vulnerability exists in roslib-socketio, which originates when a program downloads an executable file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerability by intercepting the...

Man-in-the-Middle (MitM)

roslib-socketio are vulnerable to man-in-the-middle MitM attacks. This is because the application downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the...