EUVD-2014-5674

Malware in sbrugna...

EUVD-2002-0145

Malware in sbrugna...

EUVD-2014-5881

Malware in sbrugna...

EUVD-2003-0950

Malware in sbrugna...

EUVD-2014-5419

Malware in sbrugna...

Intercom Chatbot Misconfiguration

Intercom is a solution to build & deploy AI customer experiences. If the identity verification is not enabled, an attacker can impersonate an other user and access to the previous conversations and data. This detection is included in the AI and LLM category. No source data...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986729)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986729 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong?...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2025-986141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986141 advisory. A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption. Tenable ha...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986813 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/dasd: add missing discipline function Fix crash with illegal operation exception in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-382934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382934 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ar5523: enable proper endpoint verification Syzkaller reports 1 hitting a warning about an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987021 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: nixge: fix NULL dereference In function nixgehwdmabdrelease dereference of NULL...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680624 advisory. The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL...

RockyLinux 10 : podman (RLSA-2025:10549)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:10549 advisory. podman: podman missing TLS verification CVE-2025-6032 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

CVE-2025-9485

The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...

CVE-2025-10746

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9. This is due to missing capability checks and nonce verification on functions hooked to 'init'. This makes it possible for unauthenticated attackers to deactivate t...

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

...

CVE-2023-53575

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...

CVE-2023-53575

In CVE-2023-53575, the Linux kernel wifi driver (iwlwifi, mvm) fixes a potential array out-of-bounds access by accounting for IWL_SEC_WEP_KEY_OFFSET when verifying key_len in iwl_mvm_sec_key_add(). The fix is implemented in the kernel code referenced in the stable commits: https://git.kernel.org/...

CVE-2023-53575 wifi: iwlwifi: mvm: fix potential array out of bounds access

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...

CVE-2025-39933 smb: client: let recv_done verify data_offset, data_length and remaining_data_length

In the Linux kernel, the following vulnerability has been resolved: smb: client: let recvdone verify dataoffset, datalength and remainingdatalength This is inspired by the related server fixes...