EUVD-2020-22671

Malware in sbrugna...

EUVD-2007-1036

Malware in sbrugna...

EUVD-2019-12617

Malware in sbrugna...

EUVD-2013-4972

Malware in sbrugna...

EUVD-2012-1055

Malware in sbrugna...

EUVD-2019-12550

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987261)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987261 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpbasemss. While reading sysctltcpbasemss, it can be changed...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-base (UTSA-2025-984688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984688 advisory. Unity Link Advisory UTSA-2025-984688 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-base (UTSA-2025-984701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984701 advisory. Unity Link Advisory UTSA-2025-984701 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

PT-2025-41166

Name of the Vulnerable Software and Affected Versions Dependency-Track versions prior to 4.13.5 Description Dependency-Track is a component analysis platform used for managing software supply chain risk. Versions prior to 4.13.5 may inadvertently transmit credentials intended for a private NuGet...

CVE-2025-11406: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in kaifangqian kaifangqian-base up to 7b3faecda13848b3ced6c17c7423b76c5b47b8ab. This issue affects the function getAllUsers of the file kaifangqian-parent/kaifangqian-system/src/main/java/com/kaifangqian/modules/system/controller/SysUserController.java. The...

Unity Linux 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2025-984682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984682 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in...

Amazon Linux 2 : 389-ds-base, --advisory ALAS2-2025-3025 (ALAS-2025-3025)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3025 advisory. A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to...

Unity Linux 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2025-984674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984674 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gstssaparseremoveoverridecodes...

CVE-2025-11346

The CVE concerns ILIAS up to versions 8.23/9.13/10.1 where the Base64 Decoding Handler’s unserialize function is exploitable by manipulating the f_settings argument, enabling deserialization and a remote attack. The issue’s root cause is improper handling of f_settings in the unserialize flow. Im...

Detecting DLL hijacking with machine learning: real-world cases

Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...

PT-2025-40853

Name of the Vulnerable Software and Affected Versions The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder versions prior to 2.5.0 Description The software does not properly sanitize SVG file contents when uploaded. This occurs when using the xmlrpc.php endpoint with base6...

PT-2025-40943

Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 8.24 ILIAS versions prior to 9.14 ILIAS versions prior to 10.2 Description A flaw exists in ILIAS related to the unserialize function within the Base64 Decoding Handler component. Manipulation of the f settings argument...

EUVD-2025-32452

A vulnerability was determined in samanhappy MCPHub up to 0.9.10. This affects an unknown part of the file src/controllers/serverController.ts of the component MCPRouter Service. This manipulation of the argument baseUrl causes server-side request forgery. The attack may be initiated remotely. Th...

Server-side Request Forgery (SSRF)

Overview @samanhappy/mcphub is an A hub server for mcp servers Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the baseUrl argument in the serverController.ts. An attacker can make the server initiate arbitrary requests to internal or external systems by...