CVE-2026-4433

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used...

Game-Theoretic Modeling of Stealthy Intrusion Defense against MDP-Based Attackers

The rapid expansion of Internet use has increased system exposure to cyber threats, with advanced persistent threats APTs being especially challenging due to their stealth, prolonged duration, and multi-stage attacks targeting high-value assets. In this study, we model APT evolution as a strategi...

EUVD-2020-9344

Malware in sbrugna...

EUVD-2016-6963

Malware in sbrugna...

EUVD-2020-12030

Malware in sbrugna...

EUVD-2025-16907

Malicious code in bioql PyPI...

EUVD-2025-24839

Malicious code in bioql PyPI...

EUVD-2023-2516

Malicious code in bioql PyPI...

EUVD-2024-36026

Malicious code in bioql PyPI...

EUVD-2021-9287

Malicious code in bioql PyPI...

EUVD-2022-44387

Malicious code in bioql PyPI...

EUVD-2024-50578

Malicious code in bioql PyPI...

CVE-2025-49539

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information...

CVE-2025-49852

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated attacker to retrieve information from other servers...

PT-2025-29177 · Advantech · Advantech Iview

Name of the Vulnerable Software and Affected Versions: Advantech iView affected versions not specified Description: A SQL injection issue exists in Advantech iView, potentially allowing an authenticated attacker with user-level privileges to disclose information or cause a denial-of-service...

CVE-2025-24493

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition...

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

CVE-2020-1803

Huawei smartphones Honor V20 with versions earlier than 10.0.0.179C636E3R4P3,versions earlier than 10.0.0.180C185E3R3P3,versions earlier than 10.0.0.180C432E10R3P4 have an information disclosure vulnerability. The device does not sufficiently validate the identity of smart wearable device in...

CVE-2025-47733

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

CVE-2025-31945

CVE-2025-31945 affects Growatt Cloud Applications (Growatt Cloud Portal). Multiple connected sources confirm an unauthenticated attacker can obtain other users’ charger information, exposing sensitive user data. Public details indicate vulnerable component exposure and lack of server-side input v...