PT-2025-51673

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.18 and later Android Binder driver Rust implementation Description The first Common Vulnerabilities and Exposures CVE has been assigned to Rust code within the Linux kernel. The issue, identified as CVE-2025-68260,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988737 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference when host dies Make sure xhcifreedev and xhcikillendpointurbs ...

Phishing scam uses fake death notices to trick LastPass users

LastPass has alerted users about a new phishing attack that claims the recipient has died. According to the message, a family member has submitted a death certificate to gain access to the recipient’s password vault. A link in the phishing email, supposedly to stop the request, leads to a fake pa...

EUVD-2018-20512

Malware in sbrugna...

EUVD-2018-18080

Malware in sbrugna...

EUVD-2008-2089

Malware in sbrugna...

EUVD-2021-10812

Malware in sbrugna...

EUVD-2019-8506

Malware in sbrugna...

EUVD-2018-12962

Malware in sbrugna...

EUVD-2006-2076

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986636)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986636 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference when host dies Make sure xhcifreedev and xhcikillendpointurbs ...

EUVD-2025-3731

Malicious code in bioql PyPI...

EUVD-2025-27764

Malicious code in bioql PyPI...

EUVD-2025-3960

Malicious code in bioql PyPI...

How to Use a Password Manager to Share Your Logins After You Die (2025)

Your logins will live on after you pass on. Make sure they end up in the right hands...

Malicious code in lesson-dream-death (npm)

The package lesson-dream-death was found to contain malicious code...

MAL-2025-44991 Malicious code in lesson-dream-death (npm)

The package lesson-dream-death was found to contain malicious code...

CVE-2025-30036

Stored XSS vulnerability exists in the "Oddział" Ward module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights...

CGM CLININET Cross-Site Scripting Vulnerability

CGM CLININET is a hospital information management system from CGM Germany. CGM CLININET suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the Death Diagnosis Description field in the Oddzial module, which can be...

CVE-2025-30036

Stored XSS vulnerability exists in the "Oddział" Ward module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights...