EUVD-2013-7100

Malware in sbrugna...

EUVD-2013-6849

Malware in sbrugna...

EUVD-2012-2235

Malware in sbrugna...

EUVD-2015-5651

Malware in sbrugna...

EUVD-2015-5652

Malware in sbrugna...

EUVD-2012-0248

Malware in sbrugna...

EUVD-2012-2234

Malware in sbrugna...

EUVD-2009-2933

Malware in sbrugna...

EUVD-2014-1903

Malware in sbrugna...

EUVD-2018-4993

Malware in sbrugna...

EUVD-2012-2233

Malware in sbrugna...

EUVD-2012-3456

Malware in sbrugna...

EUVD-2025-23342

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-8454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the lif...

CVE-2025-8454

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...

CVE-2025-8454

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...

CVE-2025-8454

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...

CVE-2025-8454

The uscan tool, which is part of the devscripts collection used by Debian Package maintainers, contains a vulnerability where it skips OpenPGP verification for upstream software releases if the source was already downloaded in a previous run, even if the initial verification failed. This flaw cou...

PT-2025-31608 · Unknown +2 · Devscripts +2

Name of the Vulnerable Software and Affected Versions: uscan affected versions not specified Description: uscan, a tool included in devscripts, skips OpenPGP verification for files already downloaded, even if a previous verification failed. Recommendations: At the moment, there is no information...

CVE-2025-8454: Improper Verification of Cryptographic Signature

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...