WS-2019-0445

maleficent v0.0.1-v0.0.6 contain malicious code. The package gathers system information such as environment variables, OS information, network interface, AWS credentials, npm credentials and ssh keys and prints the information to a local file but does not upload it to a remote server...

EUVD-2014-5736

Malware in sbrugna...

Malicious code in maleficent (npm)

The package maleficent was found to contain malicious code...

MAL-2025-25805 Malicious code in maleficent (npm)

The package maleficent was found to contain malicious code...

Malicious Package in maleficent

All versions of maleficent contain malicious code. The package is a demonstration of possible risks when installing npm packages. It gathers system information such as: environment variables, OS information, network interface, AWS credentials, npm credentials and ssh keys. The package prints the...

GHSA-CR5W-6RV4-R2QG Malicious Package in maleficent

All versions of maleficent contain malicious code. The package is a demonstration of possible risks when installing npm packages. It gathers system information such as: environment variables, OS information, network interface, AWS credentials, npm credentials and ssh keys. The package prints the...

PT-2020-21247

Name of the Vulnerable Software and Affected Versions maleficent versions affected versions not specified Description The issue concerns malicious code in the maleficent package, which gathers system information including environment variables, OS information, network interface details, AWS...

Maleficent Free Fall - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Maleficent Free Fall published at the 'play' market has multiple vulnerabilities...

CVE-2014-5849

The Maleficent Free Fall aka com.disney.maleficentgoo application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Double free

The Maleficent Free Fall aka com.disney.maleficentgoo application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5849

The Maleficent Free Fall aka com.disney.maleficentgoo application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5849

The CVE-2014-5849 entry concerns the Maleficent Free Fall Android app (package com.disney.maleficent_goo) v1.2.0. The vulnerability is failure to verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate....

CVE-2014-5849: Undefined Security Weakness

The Maleficent Free Fall aka com.disney.maleficentgoo application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6834

Name of the Vulnerable Software and Affected Versions The Maleficent Free Fall application version 1.2.0 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio...