EUVD-2020-5801

Malware in sbrugna...

EUVD-2020-24774

Malware in sbrugna...

EUVD-2002-1496

Malware in sbrugna...

EUVD-2020-5799

Malware in sbrugna...

EUVD-2020-29579

Malware in sbrugna...

EUVD-2020-5788

Malware in sbrugna...

EUVD-2025-12821

Malicious code in bioql PyPI...

EUVD-2023-53981

Malicious code in bioql PyPI...

EUVD-2021-6523

Malicious code in bioql PyPI...

EUVD-2025-16169

Malicious code in bioql PyPI...

Dell RecoverPoint for Virtual Machines Weak File System Permissions Vulnerability

Dell RecoverPoint for Virtual Machines is Dell's disaster recovery solution for VMware virtual environments, designed to simplify data protection and disaster recovery processes for virtual machines and ensure business continuity. Dell RecoverPoint for Virtual Machines is vulnerable to a weak fil...

CVE-2025-54059 melange creates SBOM files in APKs with world-writable permissions

melange allows users to build apk packages using declarative pipelines. Starting in version 0.23.0 and prior to version 0.29.5, SBOM files generated by melange in apks had file system permissions mode 666. This potentially allows an unprivileged user to tamper with apk SBOMs on a running image,...

PT-2025-28860 · Radiflow · Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: Radiflow iSAP Smart Collector version 1.20 Description: The issue allows a deprivileged Linux user to read the entire file system content, including files belonging to other users and having restricted access, such as the root password hash...

PT-2025-27080 · Unknown · Robmarsh Image Shadow

Name of the Vulnerable Software and Affected Versions: RobMarsh Image Shadow versions n/a through 1.1.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in RobMarsh Image Shadow...

CVE-2020-10883

This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

CVE-2025-43596

An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Upgrade to MSP360 Backup 8.1.1.19 released on 2025-05-15...

CVE-2025-43596

The CVE-2025-43596 entry concerns MSP360 Backup (MSP360 Backup for Windows) with an insecure filesystem permissions issue in version 8.0 that lets a low-privileged user run commands with SYSTEM privileges via a specially crafted backup target file. Reported impact in public sources notes high/cri...

CVE-2025-43595

An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 released on 2025-04-22...

CVE-2025-43595

An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 released on 2025-04-22...

CVE-2025-43595 MSP360 Backup (for Linux) insecure filesystem permissions

An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 released on 2025-04-22...