EUVD-2019-7287

Malware in sbrugna...

EUVD-2010-3111

Malware in sbrugna...

EUVD-2007-5654

Malware in sbrugna...

EUVD-2018-15657

Malware in sbrugna...

EUVD-2019-0658

Malware in sbrugna...

EUVD-2014-9630

Malware in sbrugna...

EUVD-2024-54348

Malicious code in bioql PyPI...

EUVD-2022-6621

Malicious code in bioql PyPI...

EUVD-2025-31764

Malicious code in bioql PyPI...

Reezonly LMS Authentication Bypass

The vulnerability of the Reezonly LMS corporate training platform is related to deficiencies in the authentication process due to time differences between users. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2025-56200

A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leadi...

PT-2025-39521

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A username enumeration issue exists when Multi-Attribute Login is enabled. The system provides a different response for existing and non-existing usernames, regardless of the validate...

DivvyDrive Web security vulnerability

DivvyDrive Web is a file management and sharing system from the Turkish company DivvyDrive. A security vulnerability exists in DivvyDrive Web versions 4.8.2.2 through prior to 4.8.2.15, which stems from the presence of an observable timing difference that could lead to a cross-domain search timin...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a difference-in-difference error in the isexecutablesection function, which could lead to out-of-bounds access t...

Jenkins is missing a permission check in the authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

Malicious code in difference-bent-news (npm)

The package difference-bent-news was found to contain malicious code...

MAL-2025-44023 Malicious code in difference-bent-news (npm)

The package difference-bent-news was found to contain malicious code...

PT-2025-36604

Impact The attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks. Patches This vulnerability has been patched, implementing a timing-safe form login...

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

CVE-2025-54999

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users an...