EUVD-2017-2816

Malware in sbrugna...

EUVD-2021-11229

Malware in sbrugna...

EUVD-2014-4695

Malware in sbrugna...

EUVD-2008-5566

Malware in sbrugna...

EUVD-2006-3230

Malware in sbrugna...

EUVD-2012-1909

Malware in sbrugna...

EUVD-2017-9722

Malware in sbrugna...

EUVD-2020-17578

Malware in sbrugna...

EUVD-2019-5823

Malware in sbrugna...

EUVD-2006-3205

Malware in sbrugna...

WordPress plugin Featured Image from URL 跨站脚本漏洞

WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...

PT-2025-41013

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.19 Rack versions prior to 3.1.17 Rack versions prior to 3.2.2 Description Rack is a modular Ruby web server interface. The Rack::Multipart::Parser component stores non-file form fields in memory as Ruby String object...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-392308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-392308 advisory. In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, wha...

FreeBSD : mongodb -- Certain Queries May Cause MongoDB Server to Crash (92880bca-a2c9-11f0-8402-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 92880bca-a2c9-11f0-8402-b42e991fc52e advisory. [email protected] reports: An authorized user can issue queries with duplicate id fields, that leads to...

PT-2025-40970

Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions prior to 5.2.8 Description The software is susceptible to Stored Cross-Site Scripting through the Featured Image custom fields of a post. Insufficient input sanitization and output...

Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

Summary Rack::Multipart::Parser stores non-file form fields parts without a filename entirely in memory as Ruby String objects. A single large text field in a multipart/form-data request hundreds of megabytes or more can consume equivalent process memory, potentially leading to out-of-memory OOM...

PT-2025-41058

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc8+ Description The Linux kernel tracing subsystem contained a flaw in the tracing/hist component. Specifically, an out-of-bounds write could occur on the action data.var ref idx array when generating a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986848)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986848 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot reported a kernel infoleak 1 of 4 bytes. After...

Exploit for Improper Handling of Case Sensitivity in Vmware Spring_Framework

CVE-2024-38820 Proof of Concept Overview This project dem...

CVE-2025-57515

The CVE-2025-57515 entry concerns Uniclare Student Portal v2, where a SQL injection flaw exists in input fields. The vulnerability enables attackers to inject arbitrary SQL commands and, per sources, can leverage time-delay functions to infer database responses. Documented affected component is t...