SonicOS SSLVPN Pre-Auth Stack-Based Buffer Overflow Vulnerability

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash.SonicWall PSIRT is not aware of active exploitation in the wild. No reports of a PoC have been made...

RHEL 9 : python-kdcproxy (RHSA-2025:21748)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:21748 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

PT-2025-47238

🚨 Critical patch for OracleLinux 8: CVE-2025-21140 affects Keylime, a core attestation tool. Remote attackers can cause a DoS, blinding your security monitoring. Read more: 👉 https://t.co/6bzEvKW40l Security https://t.co/5jvwtnF3td...

PT-2025-47016

Name of the Vulnerable Software and Affected Versions ReQuest Serious Play F3 Media Server versions 2.0.1.823 through 7.0.3.4968 Description The software contains a remote denial-of-service issue. An unauthenticated attacker can send a crafted HTTP GET request to shut down or reboot the device,...

Important: Red Hat Security Advisory: python-kdcproxy security update

An update for python-kdcproxy is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 10 : python-kdcproxy (RHSA-2025:21142)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:21142 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

CVE-2025-6176 Brotli decompression bomb DoS in scrapy/scrapy

Scrapy versions up to 2.13.2 are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of...

EUVD-2018-21597

Malware in sbrugna...

EUVD-2019-8931

Malware in sbrugna...

EUVD-2021-14479

Malware in sbrugna...

EUVD-2016-1509

Malware in sbrugna...

EUVD-2021-23607

Malware in sbrugna...

EUVD-2017-3117

Malware in sbrugna...

EUVD-2017-5750

Malware in sbrugna...

EUVD-2017-5749

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984937 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and...

EUVD-2025-23381

Malicious code in bioql PyPI...

EUVD-2021-9547

Malicious code in bioql PyPI...

EUVD-2024-35247

Malicious code in bioql PyPI...

EUVD-2021-8030

Malicious code in bioql PyPI...