CVE-2025-67877 ChurchCRM SQL Injection Vulnerability

ChurchCRM is an open-source church management system. Versions prior to 6.5.3 have a SQL injection vulnerability in the src/CartToFamily.php file, specifically in how the PersonAddress POST parameter is handled. Unlike other parameters in the same file which are correctly cast to integers using t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989561 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions...

AZL-68912 CVE-2025-40081 affecting package kernel for versions less than 6.6.112.1-2

In the Linux kernel, the following vulnerability has been resolved: perf: armspe: Prevent overflow in PERFIDX2OFF Cast nrpages to unsigned long to avoid overflow when handling large AUX buffer sizes = 2 GiB...

Modeling scams see mature models as attractive new prospects

The BBC reported on modeling scams targeting older models. Modeling scams aren't new, but it’s worth looking at how they spread today, how to spot them, and—most importantly—how to avoid falling victim to them. The classic pitch goes like this: Someone walks up to you in the street and says, "You...

EUVD-2011-3005

Malware in sbrugna...

EUVD-2020-25297

Malware in sbrugna...

EUVD-2012-5991

Malware in sbrugna...

EUVD-2018-18133

Malware in sbrugna...

EUVD-2017-16788

Malware in sbrugna...

EUVD-2004-2598

Malware in sbrugna...

EUVD-2011-3911

Malware in sbrugna...

EUVD-2012-5045

Malware in sbrugna...

EUVD-2020-19498

Malware in sbrugna...

EUVD-2025-29061

Malicious code in bioql PyPI...

EUVD-2022-30370

Malicious code in bioql PyPI...

EUVD-2022-6074

Malicious code in bioql PyPI...

EUVD-2022-36283

Malicious code in bioql PyPI...

CVE-2025-58063

CoreDNS TTL confusion vulnerability (CVE-2025-58063) affects the etcd plugin: lease IDs (64-bit) are cast to uint32 and used as TTLs, enabling DNS cache pinning and denial of service. Affected: CoreDNS versions prior to 1.12.4 (from 1.2.0 up to

Linux Distros Unpatched Vulnerability : CVE-2020-25576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the randcore crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints. CVE-2020-25576...

Linux Distros Unpatched Vulnerability : CVE-2023-34151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to sizet in svg, mvg and other coders recurring...