EUVD-2020-18317

Malware in sbrugna...

EUVD-2016-0681

Malware in sbrugna...

EUVD-2013-0349

Malware in sbrugna...

EUVD-2012-0254

Malware in sbrugna...

EUVD-2009-0785

Malware in sbrugna...

EUVD-2013-1998

Malware in sbrugna...

EUVD-2013-0200

Malware in sbrugna...

EUVD-2004-0973

Malware in sbrugna...

EUVD-2000-0111

Malware in sbrugna...

PT-2025-41169

Name of the Vulnerable Software and Affected Versions AWS VPN Client for macOS versions 1.3.2 through 5.2.0 Description A flaw exists in the AWS VPN Client for macOS that allows a local user to execute code with elevated privileges. Insufficient validation of the log destination directory during...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414586 advisory. A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local us...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414492 advisory. A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414530 advisory. A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414514 advisory. nftablesnewset in net/netfilter/nftablesapi.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service NULL pointer dereference and general...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414311 advisory. A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414655 advisory. An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap o...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414328 advisory. A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414354 advisory. A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414406 advisory. A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the...

CVE-2025-50505

Clash Verge Rev thru 2.2.3 fixed in 2.3.0 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for...