EUVD-2016-0713

Malware in sbrugna...

EUVD-2012-1777

Malware in sbrugna...

EUVD-2010-0912

Malware in sbrugna...

PT-2025-40989

Name of the Vulnerable Software and Affected Versions Alert functionality affected versions not specified Description A SQL Injection issue exists due to inadequate input validation. An authenticated user with limited privileges can execute arbitrary SQL statements, potentially leading to...

PT-2025-40984

Name of the Vulnerable Software and Affected Versions versions prior to 2025-3719 Description An access control issue exists in the Command Line Interface CLI functionality. A specific access restriction is not properly enforced for users with limited privileges. This allows an authenticated user...

Evidence of Cognitive Biases in Capture-The-Flag Cybersecurity Competitions

Understanding how cognitive biases influence adversarial decision-making is essential for developing effective cyber defenses. Capture-the-Flag CTF competitions provide an ecologically valid testbed to study attacker behavior at scale, simulating real-world intrusion scenarios under pressure. We...

PT-2025-40992

Name of the Vulnerable Software and Affected Versions Time Machine affected versions not specified Description A path traversal issue exists in the Time Machine functionality because of inadequate input validation of two parameters. An authenticated user with limited privileges can potentially...

Unity Linux 20.1070e Security Update: libvirt (UTSA-2025-680674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680674 advisory. A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414461 advisory. In the linux kernel, if IMA appraisal is used with the imaappraise=log boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414576 advisory. A NULL pointer dereference flaw was found in the Linux kernels IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This fl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414589 advisory. A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a use...

Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984794 advisory. A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function. Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414565 advisory. A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability...

CVE-2025-54087

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and...

OPENSUSE-SU-2025:15602-1 gimp-3.0.4-4.1 on GA media

These are all security issues fixed in the gimp-3.0.4-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15601-1 chromedriver-141.0.7390.54-1.1 on GA media

These are all security issues fixed in the chromedriver-141.0.7390.54-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15600-1 redis-8.2.2-1.1 on GA media

These are all security issues fixed in the redis-8.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2021-7705

Malicious code in bioql PyPI...

EUVD-2021-7729

Malicious code in bioql PyPI...

EUVD-2021-7730

Malicious code in bioql PyPI...