EUVD-2019-19268

Malware in sbrugna...

EUVD-2016-1873

Malware in sbrugna...

EUVD-2018-5812

Malware in sbrugna...

EUVD-2018-17743

Malware in sbrugna...

EUVD-2016-5833

Malware in sbrugna...

EUVD-2021-14399

Malware in sbrugna...

EUVD-2007-0864

Malware in sbrugna...

EUVD-2005-0523

Malware in sbrugna...

EUVD-2020-4767

Malware in sbrugna...

EUVD-2008-1178

Malware in sbrugna...

EUVD-2004-2456

Malware in sbrugna...

CVE-2025-50538

Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log...

CVE-2025-29192

Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log...

PT-2025-41167

Name of the Vulnerable Software and Affected Versions LLaMA-Factory versions prior to 0.9.4 Description LLaMA-Factory, a tuning library for large language models, contains a Server-Side Request Forgery SSRF issue in the chat API. Authenticated users can make the server send arbitrary HTTP request...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414434 advisory. An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be...

Spyware Disguised as Signal and ToTok Apps Targets UAE Android Users

ESET warns of fake Signal and ToTok apps spreading Android spyware in the UAE, stealing contacts, messages, and chat backups from users...

CVE-2025-58054

Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks through parsing and rendering of chat channel titles and chat thread titles via the quote message functionality when using the rich text editor. This issue is fixed in version 3.5.1...

Duplicate Advisory: Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-964p-j4gg-mhwc. This link is maintained to preserve external references. Original Description Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log...

Duplicate Advisory: Flowise Stored XSS vulnerability through logs in chatbot

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7r4h-vmj9-wg42. This link is maintained to preserve external references. Original Description Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log...

GHSA-WQ95-WR7M-26H4 Duplicate Advisory: Flowise Stored XSS vulnerability through logs in chatbot

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7r4h-vmj9-wg42. This link is maintained to preserve external references. Original Description Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log...