Improper Certificate Validation

Dragonfly is vulnerable to Improper Certificate Validation. The vulnerability is due to the Manager’s Certificate gRPC service not verifying whether the requested IP addresses belong to the requesting peer, which allows an attacker to obtain valid TLS certificates for arbitrary IP addresses and...

PT-2025-43473

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-43466

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. Exploitation may allow an attacker to cause a denial of service. Specifically, the...

EUVD-2015-7232

Malware in sbrugna...

EUVD-2008-5397

Malware in sbrugna...

EUVD-2019-18812

Malware in sbrugna...

EUVD-2008-2058

Malware in sbrugna...

EUVD-2012-2224

Malware in sbrugna...

EUVD-2025-26800

Malicious code in bioql PyPI...

EUVD-2025-26860

Malicious code in bioql PyPI...

EUVD-2022-45841

Malicious code in bioql PyPI...

EUVD-2022-36724

Malicious code in bioql PyPI...

EUVD-2023-25494

Malicious code in bioql PyPI...

EUVD-2024-29212

Malicious code in bioql PyPI...

EUVD-2025-25853

Malicious code in bioql PyPI...

EUVD-2021-6476

Malicious code in bioql PyPI...

EUVD-2023-25522

Malicious code in bioql PyPI...

CVE-2025-59353 Manager generates mTLS certificates for arbitrary IP addresses

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for arbitrary IP addresses, effectively rendering the mTLS authentication useless. The issue is that the Manager’s Certificate gRPC service does not...

Linux Distros Unpatched Vulnerability : CVE-2024-0053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local...

Linux Distros Unpatched Vulnerability : CVE-2016-2497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - services/core/java/com/android/server/pm/PackageManagerService.java in the framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, a...