6097 matches found
EUVD-2013-1738
Malware in sbrugna...
EUVD-2020-16061
Malware in sbrugna...
EUVD-2015-1482
Malware in sbrugna...
EUVD-2017-6650
Malware in sbrugna...
EUVD-2021-2065
Malware in sbrugna...
EUVD-2018-3540
Malware in sbrugna...
EUVD-2018-18094
Malware in sbrugna...
EUVD-2018-2267
Malware in sbrugna...
EUVD-2019-4936
Malware in sbrugna...
EUVD-2019-6543
Malware in sbrugna...
EUVD-2010-1423
Malware in sbrugna...
EUVD-2021-2088
Malware in sbrugna...
EUVD-2021-1142
Malware in sbrugna...
EUVD-2017-11062
Malware in sbrugna...
EUVD-2019-2967
Malware in sbrugna...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987085)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987085 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit foreachpcidev is implemented by...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
CVE-2025-10692
CVE-2025-10692 describes an SQL injection in OpenSupports 4.11.0 via POST /api/staff/get-new-tickets, where the user-supplied departmentId is concatenated into the SQL WHERE clause without parameter binding. An authenticated staff user (level ≥ 1) can alter filtering to access tickets outside the...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...