Lucene search
K

9 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/10 6:43 a.m.8 views

Malicious code in xnder-wrapper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff6538b76e9f03f65d8f16113bb6b606a59e59c172e9facb7de6ce0b523a7fb package.json declares "postinstall": "node scripts/script.js", causing scripts/script.js to run automatically on every npm install. That file is the...

5.7AI score
Exploits0References4
OSV
OSV
added 2026/06/10 6:43 a.m.7 views

MAL-2026-5492 Malicious code in xnder-wrapper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff6538b76e9f03f65d8f16113bb6b606a59e59c172e9facb7de6ce0b523a7fb package.json declares "postinstall": "node scripts/script.js", causing scripts/script.js to run automatically on every npm install. That file is the...

5.7AI score
Exploits0References4
Snyk
Snyk
added 2026/06/10 6:43 a.m.6 views

Malicious Package

Overview xnder-wrapper-module is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
Exploits0References2
NVD
NVD
added 2023/08/07 8:15 p.m.29 views

CVE-2023-38704

import-in-the-middle is a module loading interceptor specifically for ESM modules. The import-in-the-middle loader works by generating a wrapper module on the fly. The wrapper uses the module specifier to load the original module and add some wrapping code. Prior to version 1.4.2, it allows for...

9.8CVSS9.3AI score0.00846EPSS
Exploits0References2
OSV
OSV
added 2018/06/04 4:29 p.m.4 views

CVE-2016-10671

mystem-wrapper is a Yandex mystem app wrapper module. mystem-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is ...

8.1CVSS6.3AI score0.01682EPSS
Exploits0References1
seebug.org
seebug.org
added 2007/01/05 12:0 a.m.29 views

Iconics Dialog Wrapper Module ActiveX控件未明远程堆栈缓冲区溢出漏洞

Iconics Dialog Wrapper模块ActiveX控件存在一个未明缓冲区溢出问题,远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 ICONICS, Inc. Dialog Wrapper Module ActiveX Control 升级程序: ICONICS, Inc. Dialog Wrapper Module ActiveX Control 0 ICONICS, Inc. FreeToolsActiveXDlgWrapperHotFix.zip...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2007/01/03 8:0 p.m.17 views

CVE-2006-6488

Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...

7.9AI score0.07786EPSS
Exploits5References6
Tenable Nessus
Tenable Nessus
added 2007/01/03 12:0 a.m.24 views

ICONICS Dialog Wrapper Module ActiveX (DlgWrapper.dll) DoModal Function Overflow

Binary data scadaiconicsdlgwrapperactivexoverflow.nbin...

7.5CVSS7.3AI score0.07786EPSS
Exploits5References1
NVD
NVD
added 2006/12/31 5:0 a.m.18 views

CVE-2006-6488

Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...

7.5CVSS8AI score0.07786EPSS
Exploits5References6
Rows per page
Query Builder