EUVD-2002-1376

Malware in sbrugna...

EUVD-2011-3118

Malware in sbrugna...

EUVD-2021-21067

Malware in sbrugna...

EUVD-2020-3445

Malware in sbrugna...

EUVD-2020-19896

Malware in sbrugna...

EUVD-2020-20654

Malware in sbrugna...

EUVD-2002-1903

Malware in sbrugna...

EUVD-2020-7271

Malware in sbrugna...

EUVD-2005-0445

Malware in sbrugna...

EUVD-2002-0105

Malware in sbrugna...

EUVD-2007-5637

Malware in sbrugna...

EUVD-2022-27879

Malicious code in bioql PyPI...

EUVD-2022-31083

Malicious code in bioql PyPI...

EUVD-2025-7209

Malicious code in bioql PyPI...

EUVD-2025-22805

Malicious code in bioql PyPI...

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the DLL loading process. An attacker can execute arbitrary code by placing a malicious DLL in a user-writable directory that is included in the system PATH. Remediation Upgrade LizardByte/Sunshine to...

CVE-2025-58162

Summary: CVE-2025-58162 affects MobSF. An authenticated user uploading a specially crafted .a archive can write arbitrary files to any location writable by the MobSF process, due to improper handling of absolute paths during AR extraction (ar_extract writes Path(dst)/filtered without validating a...

CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

PT-2025-35522

Name of the Vulnerable Software and Affected Versions MobSF version 4.4.0 Description MobSF is a mobile application security testing tool. An authenticated user who uploaded a specially prepared one.a file could write arbitrary files to any directory writable by the user of the MobSF process. Thi...

Linux Distros Unpatched Vulnerability : CVE-2017-16933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privilege...