Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

Malicious code in algol-forever-less-exoplanet (npm)

The package algol-forever-less-exoplanet was found to contain malicious code...

Malicious code in nebula-forever-subduction-playwright (npm)

The package nebula-forever-subduction-playwright was found to contain malicious code...

Malicious code in xenos-leda-hugo-forever (npm)

The package xenos-leda-hugo-forever was found to contain malicious code...

MAL-2025-14303 Malicious code in algol-forever-less-exoplanet (npm)

The package algol-forever-less-exoplanet was found to contain malicious code...

MAL-2025-27165 Malicious code in nebula-forever-subduction-playwright (npm)

The package nebula-forever-subduction-playwright was found to contain malicious code...

MAL-2025-20776 Malicious code in forever-apex-vega-neptune (npm)

The package forever-apex-vega-neptune was found to contain malicious code...

MAL-2025-20778 Malicious code in forever-bellatrix-chromedriver-stream (npm)

The package forever-bellatrix-chromedriver-stream was found to contain malicious code...

MAL-2025-18164 Malicious code in decoherence-pulsar-eclipse-forever (npm)

The package decoherence-pulsar-eclipse-forever was found to contain malicious code...

MAL-2025-34333 Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

MAL-2025-16760 Malicious code in chai-terser-forever-wormhole (npm)

The package chai-terser-forever-wormhole was found to contain malicious code...

CVE-2022-4879

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

CVE-2024-36554

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allow a malicious user to gain information about the device by sending an SMS to the device which returns sensitive information...

CVE-2024-36556

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

CVE-2024-36558

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication...

CVE-2024-36553

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

CVE-2024-36553

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

CVE-2024-36557

The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to...

CVE-2024-36556

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

PT-2025-5847 · Forever · Forever Kidswatch Call Me 2 Kw60 +1

Name of the Vulnerable Software and Affected Versions: Forever KidsWatch Call Me KW50 version 1.0 Forever KidsWatch Call Me 2 KW60 version 1.0 Description: The issue is related to a hardcoded password, which poses a significant security risk. This allows unauthorized access to the devices...