EUVD-2019-2284

Malware in sbrugna...

EUVD-2010-2667

Malware in sbrugna...

EUVD-2017-9209

Malware in sbrugna...

EUVD-2018-17610

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-383340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-383340 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987149 advisory. In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpiinstallfixedeventhandler...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-383033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-383033 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions,...

EUVD-2022-27821

Malicious code in bioql PyPI...

EUVD-2022-6409

Malicious code in bioql PyPI...

EUVD-2022-1290

Malicious code in bioql PyPI...

EUVD-2022-5827

Malicious code in bioql PyPI...

EUVD-2022-27902

Malicious code in bioql PyPI...

EUVD-2025-5989

Malicious code in bioql PyPI...

FreshRSS 跨站脚本漏洞

FreshRSS is a free, self-hosted RSS aggregator from FreshRSS Open Source. A cross-site scripting vulnerability exists in FreshRSS versions 1.26.3 and earlier, which stems from not cleaning certain event handler attributes in the feed content and could lead to a cross-site scripting attack...

Prototype Pollution

Overview mpregular is a Affected versions of this package are vulnerable to Prototype Pollution via the mp.addEventHandler function. An attacker can cause application instability or crash by injecting malicious properties into Object.prototype through a specially crafted payload. Details Prototyp...

Regularjs 安全漏洞

Regularjs is a js library for creating data-driven components from the regularjs open source. A security vulnerability exists in Regularjs version 0.2.0 and earlier, which stems from a prototype contamination in the mp.addEventHandler function that could lead to a denial of service attack...

CVE-2025-58180

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename...

CVE-2025-58180: Improper Neutralization of Special Elements used in an OS Command

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename...

Linux Distros Unpatched Vulnerability : CVE-2023-52573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possible NULL-pointer dereference In rdsrdmacmeventhandlercmn check, if conn...

SUSE CVE-2025-38526

In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The function icelagisswitchdevrunning is being called from outside of the LAG event handler code. This results in the lag-uppernetdev being NULL sometimes. To avoid a NULL-pointer...