238 matches found
MAL-2026-2566 Malicious code in wm-plugin-visions-recorder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc7d1b94e873a6acaa539c03b3deb578141de07e79343acb659b17d4815077 The package wm-plugin-visions-recorder was found to contain malicious code. Source: ghsa-malware...
Malicious code in wm-plugin-visions-recorder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc7d1b94e873a6acaa539c03b3deb578141de07e79343acb659b17d4815077 The package wm-plugin-visions-recorder was found to contain malicious code. Source: ghsa-malware...
CVE-2025-23781
Insertion of Sensitive Information Into Sent Data vulnerability in Web Mumbai WM Options Import Export wm-options-import-export allows Retrieve Embedded Sensitive Data.This issue affects WM Options Import Export: from n/a through = 1.0.1...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992811)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992811 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to...
EUVD-2025-36839
Malicious code in wm-tests-helper npm...
MAL-2025-49066 Malicious code in wm-tests-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 121558d6ec677ddacd0f0a5568a855ebf1afa527ad4e25ad97ab770b89ba16fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview wm-tests-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in wm-tests-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 121558d6ec677ddacd0f0a5568a855ebf1afa527ad4e25ad97ab770b89ba16fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2006-4654
Malware in sbrugna...
EUVD-2010-5314
Malware in sbrugna...
EUVD-2025-3414
Malicious code in bioql PyPI...
EUVD-2024-45115
Malicious code in bioql PyPI...
Malicious Package
Overview react-native-wm-barcode is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
[SECURITY] Fedora 42 Update: xwayland-satellite-0.7-1.fc42
xwayland-satellite grants rootless Xwayland integration to any Wayland compositor implementing xdgwmbase and viewporter. This is particularly useful for compositors that understandably do not want to go through implementing support for rootless Xwayland themselves...
Malicious code in react-native-wm-weighingscale (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f52e44adf41110a245bb349fd32b3d12061d0548434843d6b2ee7c68e02f836 Any computer that has this package installed or running should be considered...
Malicious code in react-native-wm-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790e08de4e57c51f573e613b7cdd780343c4f14a00aadaff30e05fca9cb69f8b Any computer that has this package installed or running should be considered...
MAL-2025-45766 Malicious code in react-native-wm-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790e08de4e57c51f573e613b7cdd780343c4f14a00aadaff30e05fca9cb69f8b Any computer that has this package installed or running should be considered...
CVE-2010-10017
WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly validate input length, allowing an attacker to overwrite structured exception handler SEH records and execute arbitrary code. Exploitation...
CVE-2010-10017
WM Downloader 3.1.2.2 is affected by a buffer overflow when parsing a crafted .m3u playlist. The vulnerability stems from insufficient input length validation, allowing an attacker to overwrite SEH records and execute arbitrary code. Exploitation is local: the payload runs with the privileges of ...