dnSpy

dnSpyEx dnSpyEx is an unofficial continuation of the dnSpy project which is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Main features: Debug .NET and Unity assemblies Edit .NET and Unity assemblies Light and da...

Malicious code in shoaib-unity (RubyGems)

Source: ossf-package-analysis ba322db91ecd6b863e8b06aa24b804a27f29cf2c8e2954bc1e77d7dc45e2fd52 The OpenSSF Package Analysis project identified 'shoaib-unity' @ 1.0.1 rubygems as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

MAL-2026-18461 Malicious code in shoaib-unity (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fd98b807f4f85a6e016b143dec086ea16de731fb1de0cd84763dbf5d8f6919 The gem declares an extension script mkrfconf.rb that runs automatically during gem install. On execution, it collects installer host identifiers...

Malicious code in shoaib-unity (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fd98b807f4f85a6e016b143dec086ea16de731fb1de0cd84763dbf5d8f6919 The gem declares an extension script mkrfconf.rb that runs automatically during gem install. On execution, it collects installer host identifiers...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150090 advisory. Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150074 advisory. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150075 advisory. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150110 advisory. Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes localhost6. When localhost6 is not present in...

dnSpy

dnSpy - Latest release dnSpy is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Main features: Debug .NET and Unity assemblies Edit .NET and Unity assemblies Light and dark themes See below for more features Binari...

CLEANSTART-2024-TU01905 IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

Security vulnerability affects the xen package. IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

CLEANSTART-2024-RV85534 IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

Security vulnerability affects the xen package. IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

cve-2025-59489

Unity CVE-2025-59489 Vulnerability Detection Tool An automated detection tool for Unity Runtime injection vulnerabilities, specifically designed for Android game platforms. Vulnerability Overview CVE ID : CVE-2025-59489 CVSS Score : 8.4 High Affected Scope : Android applications built with Unity...

CVE-2025-59489-POC

CVE-2025-59489-POC Proof Of Concept For CVE-2025-59489, first of its kind afaik. Checks affects unity games on the Android device. Tested on API26, Android 11, on Battle Nations version sept29 2025. Only has arm64-v8a included , compile libpreinit.so and add to jniLibs/ as necessary. Writeup Used...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: PackageKit (UTSA-2026-149761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-149761 advisory. PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-XML-Parser (UTSA-2026-149760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-149760 advisory. XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption double free or corruption and crashes. A :utf8 PerlIO...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-XML-Parser (UTSA-2026-149762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-149762 advisory. XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in stserialstack. In the case stackptr == stacksize - 1, the stack will NOT be...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147023 advisory. A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147037 advisory. A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence. A client that sets up multiple fence triggers can trigger a use-after-free...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147029 advisory. A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and write...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libreoffice (UTSA-2026-147021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147021 advisory. LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a lin...