EUVD-2017-11799

Malware in sbrugna...

EUVD-2019-6519

Malware in sbrugna...

EUVD-2021-2506

Malware in sbrugna...

EUVD-2018-3517

Malware in sbrugna...

EUVD-2017-8255

Malware in sbrugna...

EUVD-2018-0615

Malware in sbrugna...

EUVD-2011-4277

Malware in sbrugna...

EUVD-2009-3234

Malware in sbrugna...

EUVD-2019-2757

Malware in sbrugna...

EUVD-2021-20249

Malware in sbrugna...

EUVD-2021-2420

Malware in sbrugna...

EUVD-2012-5526

Malware in sbrugna...

EUVD-2017-6967

Malware in sbrugna...

WordPress plugin Featured Image from URL 跨站脚本漏洞

WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...

PT-2025-41166

Name of the Vulnerable Software and Affected Versions Dependency-Track versions prior to 4.13.5 Description Dependency-Track is a component analysis platform used for managing software supply chain risk. Versions prior to 4.13.5 may inadvertently transmit credentials intended for a private NuGet...

CVE-2025-7400: Improper Neutralization of Input During Web Page Generation

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680639 advisory. LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. Tenabl...

GHSA-HMGH-466J-FX4C Flowise vulnerable to RCE via Dynamic function constructor injection

Summary User-controlled input flows to an unsafe implementaion of a dynamic Function constructor , allowing a malicious actor to run JS code in the context of the host not sandboxed leading to RCE. Details When creating a new Custom MCP Chatflow in the platform, the MCP Server Config displays a...

Cyber Warfare during Operation Sindoor: Malware Campaign Analysis and Detection Framework

Rapid digitization of critical infrastructure has made cyberwarfare one of the important dimensions of modern conflicts. Attacking the critical infrastructure is an attractive pre-emptive proposition for adversaries as it can be done remotely without crossing borders. Such attacks disturb the...

CVE-2023-53579

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action...