CVE-2025-20289

Cisco ISE and Cisco ISE-PIC's web-based management interface authenticate to users and are affected by multiple vulnerabilities allowing reflected XSS due to insufficient input validation. An authenticated, low-privilege attacker can exploit specific pages to run arbitrary script code in the user...

Cisco Identity Services Engine Reflected Cross-Site Scripting and Information Disclosure Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to either disclose sensitive information or conduct a reflected cross-site scripting XSS attack. For more information about these...

CVE-2025-20304: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

CVE-2025-20303: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

CVE-2025-20289: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990279 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQLEVEL Baoquan reported that after triggering a cras...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987713 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQLEVEL Baoquan reported that after triggering a cras...

EUVD-2019-4471

Malware in sbrugna...

EUVD-2020-12529

Malware in sbrugna...

EUVD-2008-4497

Malware in sbrugna...

EUVD-2002-1703

Malware in sbrugna...

EUVD-2019-4473

Malware in sbrugna...

EUVD-2019-4472

Malware in sbrugna...

EUVD-2020-12515

Malware in sbrugna...

EUVD-2020-12510

Malware in sbrugna...

EUVD-2019-0872

Malware in sbrugna...

EUVD-2021-2889

Malicious code in bioql PyPI...

EUVD-2024-47134

Malicious code in bioql PyPI...

EUVD-2023-59727

Malicious code in bioql PyPI...

CVE-2025-9585

A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilithdeletepicfile of the file /usr/bin/webmgnt. This manipulation of the argument portaldeletepicname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly...