PT-2025-48441

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7 rc1 Description A flaw exists in OpenVPN due to inadequate argument validation. This issue allows an attacker to potentially cause a heap buffer over-read when processing IP addresses. Recommendations...

EUVD-2020-2493

Malware in sbrugna...

EUVD-2019-4148

Malware in sbrugna...

EUVD-2020-2523

Malware in sbrugna...

EUVD-2006-7142

Malware in sbrugna...

EUVD-2015-8968

Malware in sbrugna...

EUVD-2007-5774

Malware in sbrugna...

EUVD-2008-0376

Malware in sbrugna...

EUVD-2007-0705

Malware in sbrugna...

EUVD-2015-8962

Malware in sbrugna...

EUVD-2025-31025

Malicious code in bioql PyPI...

EUVD-2022-55368

Malicious code in bioql PyPI...

EUVD-2025-9312

Malicious code in bioql PyPI...

EUVD-2022-55288

Malicious code in bioql PyPI...

EUVD-2025-31880

Malicious code in bioql PyPI...

SUSE CVE-2023-53513

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbdioctl arg without verification. The UBSAN warning calltrace like below: UBSAN: Undefined behaviour in fs/buffer.c:1709:35 signed integer...

CVE-2023-53513

The CVE-2023-53513 issue is a Linux kernel vulnerability where incomplete validation of the nbd ioctl arg can trigger an i_size overflow when the arg is coerced to int (arg cast in nbd_ioctl /nbd_add_socket). The root cause is insufficient validation of large ioctl arguments, allowing an overflow...

BIT-MONGODB-2025-3084 MongoDB Server may crash due to improper validation of explain command

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Serve...

CVE-2025-20338

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...

CVE-2025-20338

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...