EUVD-2019-0320

Malware in sbrugna...

EUVD-2018-3143

Malware in sbrugna...

EUVD-2020-26260

Malware in sbrugna...

EUVD-2005-0834

Malware in sbrugna...

EUVD-2017-17120

Malware in sbrugna...

CVE-2025-11362: Allocation of Resources Without Limits or Throttling

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

TOR Virtual Network Tunneling Tool 0.4.8.19

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check hifmspi and mspi resource availability, which could lead to a null pointer dereference...

CVE-2025-40649: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infrastructure BBMRI-ERIC, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using parameter text in '/api/v3/negotiations/ /posts'...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to release V4L2 fwnode resources upon a check failure in the hi846parsedt function, which could...

Linux kernel TLS Buffer Overflow DoS

The vulnerability of the tlsrxmsgsize function in the Linux kernel’s TLS component is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986910)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986910 advisory. In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix error handling in ath10ksetupmsaresources The devicenode pointer is returned by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987235 advisory. In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986327 advisory. In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the...

GHSA-M42M-M8CR-8M58 LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing

The HTMLSectionSplitter class in langchain-text-splitters is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSLT without any...

CVE-2025-58582: Allocation of Resources Without Limits or Throttling

If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged...

GitLab GraphQL Endpoint DoS

The vulnerability of the GraphQL Endpoint component of the software platform based on Git for collaborative code development in GitLab EE/CE is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SUSE CVE-2023-53567

In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a...

CVE-2023-53596

In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devresreleaseall only gets called if the device has a bus and has been probed. This leads to issues when using bus-less or driver-less devices...

AZL-75072 CVE-2022-50500 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed If some items in nsimdevresourcesregister fail, memory leak will occur. The following is the memory leak information. unreferenced object...