EUVD-2012-2138

Malware in sbrugna...

CVE-2025-56243: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

CVE-2025-52021: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

CVE-2025-44823

Nagios Log Server (before 2024R1.3.2) is vulnerable: unauthenticated? No—authenticated users with access to the API can call /nagioslogserver/index.php/api/system/get_users to retrieve cleartext admin API keys. The underlying issue exposes user accounts and API keys, enabling full system compromi...

EUVD-2025-32882

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

PT-2025-41137

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Online Shopping System Advanced version 1.0 Description A SQL Injection issue exists in the edit product.php file. The product id GET parameter is passed to a SQL query without sufficient validation or parameterization. This cou...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987100 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-423736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-423736 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6getifaddr and ipv6deladdr Although ipv6getifaddr walks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936101 advisory. A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in getblockrow at libavfilter/vfbm3d.c, which might lead to memory corruption and other potential...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986711 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of clientcount in dmachanget The first time dmachanget is called...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987177 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails armsmmurpmget invokes...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-380009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380009 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: Fix clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987087 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix possible null-ptr-deref in cadencenanddtprobe It will cause...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403670 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987090 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986431 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmutrygetdatapage looks up pages under cmdrlock, but i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-380104)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380104 advisory. In the Linux kernel, the following vulnerability has been resolved: netns: Make getnetns handle zero refcount net Syzkaller hit a warning: refcountt: addition on 0;...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986878 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987092 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platformgetresource It will cause...