MOEW

Invisible Threats, Visible Solutions. Misaligned Opcode Exception Waterfall MOEW 3‑Stage SEH Waterfall PoC Benign, x86/Wow64 TL;DR: This PoC demonstrates a 3‑stage Structured Exception Handling SEH cascade caused by deliberate misaligned execution into raw byte blobs whose first valid instruction...

Malicious code in lightning-waterfall-jvc223-project (npm)

The package lightning-waterfall-jvc223-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jungle-waterfall-xck202-project (npm)

The package jungle-waterfall-xck202-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jellyfish-waterfall-xwl317-project (npm)

The package jellyfish-waterfall-xwl317-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jasmine-waterfall-paz932-project (npm)

The package jasmine-waterfall-paz932-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jasmine-waterfall-iqc218-project (npm)

The package jasmine-waterfall-iqc218-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in icicle-waterfall-wix021-project (npm)

The package icicle-waterfall-wix021-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hollow-waterfall-bez687-project (npm)

The package hollow-waterfall-bez687-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hedgehog-waterfall-vsl162-project (npm)

The package hedgehog-waterfall-vsl162-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in glacier-waterfall-ckb568-project (npm)

The package glacier-waterfall-ckb568-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in aroma-waterfall-dla825-project (npm)

The package aroma-waterfall-dla825-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious Package

Overview aroma-waterfall-dla825-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

CVE-2026-53451: Improper Limitation of a Pathname to a Restricted Directory

Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterfall-snapshot Socket.IO command passes attacker-controlled snapshotName input from backend/handlers/entities/sdr.py to...

Malicious Package

Overview icicle-waterfall-wix021-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview jellyfish-waterfall-xwl317-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

CVE-2025-41278

Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host...

CVE-2025-41269

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating...

CVE-2025-41274

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating...

CVE-2025-41267

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating syste...

CVE-2025-41276

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating...