EUVD-2007-0562

Malware in sbrugna...

EUVD-2007-0537

Malware in sbrugna...

EUVD-2017-0128

Malware in sbrugna...

EUVD-2014-1902

Malware in sbrugna...

EUVD-2017-18000

Malware in sbrugna...

EUVD-2014-6977

Malware in sbrugna...

EUVD-2017-10228

Malware in sbrugna...

SUSE CVE-2025-59729

When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...

EUVD-2025-32518

When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...

CVE-2025-59729

CVE-2025-59729 affects FFmpeg’s DHAV handling. The provided technical description shows an integer underflow in the offset calculation when parsing a DHAV header, causing a 32-bit offset read to reference data outside the allocated buffer. In large DHAV files (e.g., > 0x100000 bytes), the end_...

git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...

EUVD-2025-22798

Malicious code in bioql PyPI...

EUVD-2024-29841

Malicious code in bioql PyPI...

RLSA-2025:9063 Moderate: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871...

Tips for Merging Large PDF Files Online

As more businesses rely on digital documents today, effective large file management has also become necessary. PDFs are…...

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Starlette framework which is vulnerable to CVE-2025-54121.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Starlette framework which is vulnerable to CVE-2025-54121. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-54121 DESCRIPTION: Starlette is a...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, vault-k8s, custom-pod-autoscaler-operator, git-lfs, kubeflow-katib, terraform-provider-time, checksec, pvc-autoresizer, linkerd2-proxy-init, local-path-provisioner, ctop, hivemind, kuberay-operator, octo-sts, lvm-driver, shfmt,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, vault-k8s, custom-pod-autoscaler-operator, git-lfs, kubeflow-katib, terraform-provider-time, checksec, pvc-autoresizer, linkerd2-proxy-init, local-path-provisioner, ctop, hivemind, kuberay-operator, octo-sts, lvm-driver, shfmt,...

GO-2025-3926 Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness

Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness...

BIT-GITLAB-2025-7337 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user with Developer-level access to cause a persistent denial of service affecting all users on a GitLab instance by...