PT-2025-41611

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.13 Wireshark versions 4.4.0 through 4.4.9 Description An infinite loop in the MONGO dissector can lead to a denial of service. Recommendations Update Wireshark to a version later than 4.4.9. Update Wireshar...

Wireshark 4.2.x < 4.2.14 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.2.14. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.14 advisory. - MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service CVE-2025-11626...

Wireshark 4.2.x < 4.2.14 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.14. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.14 advisory. - MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service...

EUVD-2020-3852

Malware in sbrugna...

EUVD-2021-1282

Malware in sbrugna...

EUVD-2018-8590

Malware in sbrugna...

EUVD-2021-2220

Malware in sbrugna...

EUVD-2013-4256

Malware in sbrugna...

EUVD-2024-44432

Malicious code in bioql PyPI...

EUVD-2024-0760

Malicious code in bioql PyPI...

EUVD-2022-53429

Malicious code in bioql PyPI...

CVE-2025-34227 Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (=0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (=0.28.0) +18180 more potentially affected by CVE-2025-41249 via org.springframework:spring-core (>=6.0.0 <=6.1.21)

org.springframework:spring-core MAVEN version =6.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 - ai.djl.spring:djl-spring-boot-starter-autoconfigure =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-linux-x8664 =0.2...

Security Bulletin: IBM Db2 used by IBM Security Verify Governance has multiple vulnerabilities

Summary IBM Security Verify Governance ISVG uses IBM Db2 database. Information about security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Linux Distros Unpatched Vulnerability : CVE-2024-7553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This...

Linux Distros Unpatched Vulnerability : CVE-2024-8013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to...

MAL-2025-26631 Malicious code in mongo-library (npm)

The package mongo-library was found to contain malicious code...

MAL-2025-15447 Malicious code in bangscripts-mongo (npm)

The package bangscripts-mongo was found to contain malicious code...

Malicious code in mongo-library (npm)

The package mongo-library was found to contain malicious code...

Malicious code in bangscripts-mongo (npm)

The package bangscripts-mongo was found to contain malicious code...