EUVD-2020-26062

Malware in sbrugna...

EUVD-2019-11373

Malware in sbrugna...

EUVD-2021-15263

Malware in sbrugna...

This Week in Spring - October 7th, 2025

Hi, Spring fans! How're you doing this fantastic October afternoon? I'm on a train returning from Frankfurt, Germany, where I spoke at the Cloud Foundry Day Frankfurt event about how awesome it is to build an application with Spring Boot and Cloud Foundry. Yesterday I was in Antwerp, Belgium, and...

Unity Linux 20.1070a Security Update: rsync (UTSA-2025-984684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984684 advisory. A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cloud-init (UTSA-2025-986119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986119 advisory. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init default configurations...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cloud-init (UTSA-2025-986088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986088 advisory. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init default configurations...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to an open redirect attack due to the Eclipse Jetty package (CVE-2024-6763)

Summary Eclipse Jetty is used by DataStage on Cloud Pak for Data as part of the server processing functionality. Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI,...

RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score

Wiz Research discovers vulnerability stemming from 13-year-old bug present in all Redis versions, used in 75% of cloud environments...

CVE-2025-0609

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting XSS. This issue affects Logo Cloud: before 1.18...

CVE-2025-0608

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...

CVE-2025-0607

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57...

CVE-2025-0609

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting XSS. This issue affects Logo Cloud: before 1.18...

EUVD-2025-32525

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting XSS.This issue affects Logo Cloud: before 1.18...

CVE-2025-0609 XSS in Logo Software's Logo Cloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting XSS. This issue affects Logo Cloud: before 1.18...

CVE-2025-0609

Logo Cloud (Logo Software Inc.) is affected by an XSS vulnerability due to improper input neutralization in web page generation. The issue affects Logo Cloud before version 1.18. Technical details across connected sources consistently describe a cross-site scripting flaw stemming from insufficien...

CVE-2025-0609 XSS in Logo Software's Logo Cloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting XSS. This issue affects Logo Cloud: before 1.18...

EUVD-2025-32526

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing.This issue affects Logo Cloud: before 2025.R6...

CVE-2025-0608 Open Redirect in Logo Software's Logo Cloud

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...

CVE-2025-0608

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...