EUVD-2021-23004

Malware in sbrugna...

EUVD-2006-4641

Malware in sbrugna...

EUVD-2008-5547

Malware in sbrugna...

EUVD-2008-5109

Malware in sbrugna...

EUVD-2015-3916

Malware in sbrugna...

EUVD-2017-12418

Malware in sbrugna...

EUVD-2006-0526

Malware in sbrugna...

PT-2025-40986

Name of the Vulnerable Software and Affected Versions Negotiator version 3.15.2 Description An Insecure Direct Object Reference IDOR exists in Negotiator. This allows an attacker to access or modify unauthorized resources by manipulating requests. The issue involves the userID parameter within th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-392013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-392013 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ES...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-409061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-409061 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-384118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-384118 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987094 advisory. In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Make sure to free skb when it is completely used With the skb pointer piggy-backed ...

BBMRI-ERIC Negotiator 安全漏洞

BBMRI-ERIC Negotiator is a biospecimen repository access tool from the Austrian company BBMRI-ERIC. A security vulnerability exists in BBMRI-ERIC Negotiator version v3.15.2, which stems from improper manipulation of the userID parameter and could lead to an insecure direct object reference attack...

CVE-2025-59447

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

...

CVE-2025-11280 Frappe LMS Assignment Picture files direct request

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

CVE-2025-11280 Frappe LMS Assignment Picture files direct request

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

CVE-2025-11280

The CVE-2025-11280 vulnerability affects Frappe LMS 2.35.0, in the Assignment Picture Handler component’s /files/ area. It enables a remote, high-complexity manipulation of a direct request, with exploitability rated as difficult and the exploit published. Upgrade the affected component as remedi...

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

...

Frappe Learning Management System 安全漏洞

Frappe Learning Management System is an easy-to-use open source learning management system from Frappe Open Source. A security vulnerability exists in Frappe Learning Management System version 2.35.0, which originates from a direct request for the file /files/ in the Assignment Picture Handler...