EUVD-2000-0887

Malware in sbrugna...

EUVD-2024-36193

Malicious code in bioql PyPI...

EUVD-2023-23951

Malicious code in bioql PyPI...

Linux driver/hsi/clients/ssi_protocol.c Confidential Data Access

The vulnerability of the drivers/hsi/clients/ssiprotocol.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2025-37838

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HSI: ssiprotocol: Fix use after free vulnerability in ssiprotocol Driver Due to Race Condition In the ssiprotocolprobe function, &ssi-work is bound with...

HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition

...

CVE-2025-36558: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

KUNBUS PiCtory version 2.11.1 and earlier are vulnerable to a cross-site-scripting attack via the ssotoken used for authentication. If an attacker provides the user with a PiCtory URL containing an HTML script as an ssotoken, that script will reply to the user and be executed...

CVE-2025-35996: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due to a missing escape or sanitization, t...

SUSE CVE-2025-37838

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fix use after free vulnerability in ssiprotocol Driver Due to Race Condition In the ssiprotocolprobe function, &ssi-work is bound with ssipxmitwork, In ssippnsetup, the ssippnxmit function within the ssippnops...

UBUNTU-CVE-2025-37838

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fix use after free vulnerability in ssiprotocol Driver Due to Race Condition In the ssiprotocolprobe function, &ssi-work is bound with ssipxmitwork, In ssippnsetup, the ssippnxmit function within the ssippnops...

CVE-2025-37838 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fix use after free vulnerability in ssiprotocol Driver Due to Race Condition In the ssiprotocolprobe function, &ssi-work is bound with ssipxmitwork, In ssippnsetup, the ssippnxmit function within the ssippnops...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse vulnerability in the ssiprotocol driver...

MAL-2025-1648 Malicious code in onyx-ssi-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a5cdb0edf65e0650f15c2a00e379442b620823ea1ed315afb6946edc3a4268 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onyx-ssi-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a5cdb0edf65e0650f15c2a00e379442b620823ea1ed315afb6946edc3a4268 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TRENDnet TEW-821DAP Function Code Execution

The vulnerability of the admadduser function in the ssi service of TRENDnet TEW-821DAP wireless access points is related to the escape of the operation outside the buffer in memory when processing the username parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code o...

CVE-2025-21103: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

Dell NetWorker Management Console, versions 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contains an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server...

PT-2025-49181

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.66 Description The Apache HTTP Server, when configured with Server Side Includes SSI enabled and utilizing mod cgid but not mod cgi, improperly handles shell-escaped query strings passed to exec cmd=".....

CVE-2024-52427 WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability

Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include SSI Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through = 2.3.11...

CVE-2024-52427

CVE-2024-52427 affects WordPress Plugin Event Tickets with Ticket Scanner (

CVE-2024-52427: Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include SSI Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through = 2.3.11...