EUVD-2021-2473

Malware in sbrugna...

EUVD-2018-0345

Malware in sbrugna...

EUVD-2019-0624

Malware in sbrugna...

EUVD-2021-23122

Malware in sbrugna...

CVE-2023-53585

CVE-2023-53585 : In the Linux kernel, a bug in bpf_sk_assign could leak a refcount when a newly created unhashed UDP socket is bound after being added to a sockmap. The issue arises because bpf_sk_assign may be invoked in an RCU-critical section before the sk’s final state (SOCK_RCU_FREE) is appl...

CVE-2023-53585 bpf: reject unhashed sockets in bpf_sk_assign

In the Linux kernel, the following vulnerability has been resolved: bpf: reject unhashed sockets in bpfskassign The semantics for bpfskassign are as follows: sk = somelookupfunc bpfskassignskb, sk bpfskreleasesk That is, the sk is not consumed by bpfskassign. The function therefore needs to make...

f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid

...

EUVD-2025-31070

Malicious code in bioql PyPI...

EUVD-2025-7842

Malicious code in bioql PyPI...

EUVD-2025-3832

Malicious code in bioql PyPI...

EUVD-2025-3263

Malicious code in bioql PyPI...

EUVD-2025-7841

Malicious code in bioql PyPI...

EUVD-2025-12033

Malicious code in bioql PyPI...

EUVD-2022-43797

Malicious code in bioql PyPI...

EUVD-2022-29642

Malicious code in bioql PyPI...

EUVD-2025-31595

Malicious code in bioql PyPI...

CVE-2025-34182

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings. This value is directly displayed when visiting the page/interfacesassign.php, which can result in stored cross-site...

CLSA-2025-1759154304 libwebp: Fix of 3 CVEs

CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...

libwebp: Fix of 3 CVEs

CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...

CVE-2025-59827

Flag Forge is a Capture The Flag CTF platform. In version 2.1.0, the /api/admin/assign-badge endpoint lacks proper access control, allowing any authenticated user to assign high-privilege badges e.g., Staff to themselves. This could lead to privilege escalation and impersonation of administrative...