CVE-2025-11647

The CVE-2025-11647 issue affects Tomofun Furbo 360 and Furbo Mini, specifically the GATT Service handling. Affects Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The root cause is manipulation of the DeviceToken argument in the GATT Service, leading to information disclosure. E...

CVE-2025-11646

CVE-2025-11646 affects Tomofun Furbo 360 (FB0035_FW_036 and earlier) and Furbo Mini (MC0020_FW_074 and earlier). The issue arises from improper access controls in the GATT Service component, enabling a local‑network attack. Public exploits are available. Remediation per PT Security advisory: upda...

EUVD-2007-1766

Malware in sbrugna...

EUVD-2021-1368

Malware in sbrugna...

EUVD-2018-19431

Malware in sbrugna...

EUVD-2017-5890

Malware in sbrugna...

EUVD-2020-20355

Malware in sbrugna...

EUVD-2019-13464

Malware in sbrugna...

EUVD-2024-46531

Malicious code in bioql PyPI...

EUVD-2022-46639

Malicious code in bioql PyPI...

EUVD-2025-27205

Malicious code in bioql PyPI...

EUVD-2022-46631

Malicious code in bioql PyPI...

EUVD-2021-8872

Malicious code in bioql PyPI...

EUVD-2022-29723

Malicious code in bioql PyPI...

EUVD-2022-6731

Malicious code in bioql PyPI...

EUVD-2023-55031

Malicious code in bioql PyPI...

EUVD-2023-55027

Malicious code in bioql PyPI...

EUVD-2023-41224

Malicious code in bioql PyPI...

EUVD-2022-40638

Malicious code in bioql PyPI...

CVE-2025-59353

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for arbitrary IP addresses, effectively rendering the mTLS authentication useless. The issue is that the Manager’s Certificate gRPC service does not...