PT-2025-48970

Name of the Vulnerable Software and Affected Versions Envoy versions 1.33.12 through 1.36.2 Description Envoy, a high-performance edge/middle/service proxy, has an issue when configured in TCP proxy mode to handle CONNECT requests. It accepts client data before issuing a 2xx response and forwards...

UBUNTU-CVE-2025-61789

Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...

EUVD-2012-4342

Malware in sbrugna...

EUVD-2017-0010

Malware in sbrugna...

EUVD-2007-4825

Malware in sbrugna...

EUVD-2019-8033

Malware in sbrugna...

EUVD-2011-2662

Malware in sbrugna...

EUVD-2020-27404

Malware in sbrugna...

EUVD-2021-14515

Malware in sbrugna...

EUVD-2016-10549

Malware in sbrugna...

EUVD-2019-0779

Malware in sbrugna...

EUVD-2024-37266

Malicious code in bioql PyPI...

EUVD-2024-54412

Malicious code in bioql PyPI...

EUVD-2021-28307

Malicious code in bioql PyPI...

EUVD-2024-36383

Malicious code in bioql PyPI...

EUVD-2023-29836

Malicious code in bioql PyPI...

EUVD-2023-51739

Malicious code in bioql PyPI...

External Control of File Name or Path

Overview ServiceStack.Text is a set of JSON, JSV and CSV text serializers Affected versions of this package are vulnerable to External Control of File Name or Path in the url parameter to the GetErrorResponse method. An attacker can relay NTLM credentials in the context of the current user by...

CVE-2025-6444 ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

ServiceStack 输入验证错误漏洞

ServiceStack is an API for building high-performance web services from ServiceStack, Inc. An input validation error vulnerability exists in ServiceStack that stems from the GetErrorResponse method not properly validating user input, which could lead to an NTLM credential relay attack...