EUVD-2017-9404

Malware in sbrugna...

EUVD-2020-23135

Malware in sbrugna...

EUVD-2007-4606

Malware in sbrugna...

EUVD-2021-26917

Malware in sbrugna...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 has a stack buffer overflow vulnerability, which originates from the parameter ddnsEn in th...

PT-2025-40977

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18 Description A buffer overflow can occur due to the manipulation of the ddnsEn argument within a POST request to the /goform/SetDDNSCfg file. This impacts an unknown function of the POST Parameter Handler componen...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986933 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986671 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987139 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: glibc (UTSA-2025-177646)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-177646 advisory. Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987257 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been...

Unity Linux 20.1070e Security Update: dhcp (UTSA-2025-680666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680666 advisory. In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986444 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in siparsepowertable In function siparsepowertable, array...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986962 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNregisterdevice Afer commit 1fa5ae857bb1 driver core: get...

GHSA-HMGH-466J-FX4C Flowise vulnerable to RCE via Dynamic function constructor injection

Summary User-controlled input flows to an unsafe implementaion of a dynamic Function constructor , allowing a malicious actor to run JS code in the context of the host not sandboxed leading to RCE. Details When creating a new Custom MCP Chatflow in the platform, the MCP Server Config displays a...

EUVD-2025-32519

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

How we trained an ML model to detect DLL hijacking

DLL hijacking is a common technique in which attackers replace a library called by a legitimate process with a malicious one. It is used by both creators of mass-impact malware, like stealers and banking Trojans, and by APT and cybercrime groups behind targeted attacks. In recent years, the numbe...

The installers of DENSO TEN drive recorder viewer may insecurely load Dynamic Link Libraries

Overview The installers of DENSO TEN drive recorder viewer may insecurely load Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2025-57781 This vulnerability is exploited by directing a user to download and place a crafted DLL file with the affected installer, and to execute...

CVE-2025-57781

The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2025-57781

The CVE-2025-57781 entry concerns the DENSO TEN drive recorder viewer installers. A DLL search path flaw (Uncontrolled search path element, CWE-427) may cause insecure DLL loading, enabling arbitrary code execution with the user’s privileges if the installer is run. Affected software is described...