PT-2025-44323

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.11.0 Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the fim alert implementation where it does not verify if the return value of ctime r is NULL before using it with...

EUVD-2025-36535

Wazuh's File Integrity Monitoring FIM, when configured with automatic threat removal, contains a time-of-check/time-of-use TOCTOU race condition that can allow a local, low-privileged attacker to cause the Wazuh service running as NT AUTHORITY\SYSTEM to delete attacker-controlled files or paths...

CVE-2025-34294

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the behavior originates from a documentation-published Active Response example script. Please refer to this advisory https://github.com/wazuh/wazuh-documentation/security/advisories/GHSA-46r5-xp98-fpgg...

CVE-2025-34294

...

CVE-2025-34294

...

CVE-2025-34294

This CVE entry is rejected/not used and does not represent an active vulnerability.

PT-2025-44187

Name of the Vulnerable Software and Affected Versions Wazuh affected versions not specified Description A time-of-check/time-of-use TOCTOU race condition exists in the File Integrity Monitoring FIM component when automatic threat removal is enabled. This can allow a local, low-privileged attacker...

编号撤回

Wazuh File Integrity Monitoring is a file integrity monitoring software from Wazuh USA. A security vulnerability exists in Wazuh File Integrity Monitoring that stems from insufficient synchronization and inadequate final path validation in the threat removal workflow, which could lead to local...

EUVD-2013-1098

Malware in sbrugna...

EUVD-2020-12784

Malware in sbrugna...

EUVD-2018-0529

Malware in sbrugna...

EUVD-2017-15523

Malware in sbrugna...

EUVD-2020-29044

Malware in sbrugna...

EUVD-2019-4386

Malware in sbrugna...

EUVD-2016-5683

Malware in sbrugna...

EUVD-2020-7515

Malware in sbrugna...

EUVD-2020-3961

Malware in sbrugna...

EUVD-2007-3833

Malware in sbrugna...

EUVD-2020-29450

Malware in sbrugna...

RLSA-2025:14493 Important: aide security update

Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions. Security Fixes: aide: improper output neutralization enables bypassing CVE-2025-54389 For more details abou...