EUVD-2020-0050

Malware in sbrugna...

EUVD-2013-4407

Malware in sbrugna...

EUVD-2015-4570

Malware in sbrugna...

EUVD-2017-16797

Malware in sbrugna...

EUVD-2018-0296

Malware in sbrugna...

EUVD-2018-13576

Malware in sbrugna...

EUVD-2021-19554

Malware in sbrugna...

EUVD-2013-5388

Malware in sbrugna...

EUVD-2023-29958

Malicious code in bioql PyPI...

EUVD-2023-41362

Malicious code in bioql PyPI...

EUVD-2022-0887

Malicious code in bioql PyPI...

EUVD-2023-2411

Malicious code in bioql PyPI...

EUVD-2022-45087

Malicious code in bioql PyPI...

EUVD-2025-16794

Malicious code in bioql PyPI...

shiro-exploit

This is a Python script for exploiting a vulnerability in Apache Shiro, a Java-based security framework. The script is designed to bypass authentication and authorization checks in Shiro, allowing an attacker to gain unauthorized access to sensitive data. The script uses the Crypto.Cipher module ...

Linux Distros Unpatched Vulnerability : CVE-2025-27498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aes-gcm is a pure Rust implementation of the AES-GCM. In decryptinplacedetached, the decrypted ciphertext which is the correct ciphertext is exposed even if the...

Linux Distros Unpatched Vulnerability : CVE-2021-3744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak flaw was found in the Linux kernel in the ccprunaesgcmcmd function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2021-3764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak flaw was found in the Linux kernel's ccprunaesgcmcmd function that allows an attacker to cause a denial of service. The vulnerability is similar t...

CVE-2025-54887 jwe: Missing AES-GCM authentication tag validation in encrypted JWEs

jwe is a Ruby implementation of the RFC 7516 JSON Web Encryption JWE standard. In versions 1.1.0 and below, authentication tags of encrypted JWEs can be brute forced, which may result in loss of confidentiality for those JWEs and provide ways to craft arbitrary JWEs. This puts users at risk becau...

GHSA-C7P4-HX26-PR73 JWE is missing AES-GCM authentication tag validation in encrypted JWE

Overview The authentication tag of encrypted JWEs can be brute forced, which may result in loss of confidentiality for those JWEs and provide ways to craft arbitrary JWEs. Impact - JWEs can be modified to decrypt to an arbitrary value - JWEs can be decrypted by observing parsing differences - The...