EUVD-2006-3230

Malware in sbrugna...

EUVD-2012-1909

Malware in sbrugna...

EUVD-2017-9722

Malware in sbrugna...

EUVD-2020-17578

Malware in sbrugna...

EUVD-2019-5823

Malware in sbrugna...

EUVD-2006-3205

Malware in sbrugna...

WordPress plugin Featured Image from URL 跨站脚本漏洞

WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...

PT-2025-41013

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.19 Rack versions prior to 3.1.17 Rack versions prior to 3.2.2 Description Rack is a modular Ruby web server interface. The Rack::Multipart::Parser component stores non-file form fields in memory as Ruby String object...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-392308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-392308 advisory. In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, wha...

FreeBSD : mongodb -- Certain Queries May Cause MongoDB Server to Crash (92880bca-a2c9-11f0-8402-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 92880bca-a2c9-11f0-8402-b42e991fc52e advisory. [email protected] reports: An authorized user can issue queries with duplicate id fields, that leads to...

PT-2025-40970

Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions prior to 5.2.8 Description The software is susceptible to Stored Cross-Site Scripting through the Featured Image custom fields of a post. Insufficient input sanitization and output...

Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

Summary Rack::Multipart::Parser stores non-file form fields parts without a filename entirely in memory as Ruby String objects. A single large text field in a multipart/form-data request hundreds of megabytes or more can consume equivalent process memory, potentially leading to out-of-memory OOM...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986848)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986848 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot reported a kernel infoleak 1 of 4 bytes. After...

PT-2025-41058

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc8+ Description The Linux kernel tracing subsystem contained a flaw in the tracing/hist component. Specifically, an out-of-bounds write could occur on the action data.var ref idx array when generating a...

Exploit for Improper Handling of Case Sensitivity in Vmware Spring_Framework

CVE-2024-38820 Proof of Concept Overview This project dem...

CVE-2025-57515

The CVE-2025-57515 entry concerns Uniclare Student Portal v2, where a SQL injection flaw exists in input fields. The vulnerability enables attackers to inject arbitrary SQL commands and, per sources, can leverage time-delay functions to infer database responses. Documented affected component is t...

BIT-MONGODB-2025-7259 Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash

An authorized user can issue queries with duplicate id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0...

CVE-2025-9080

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2025-39943 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate dataoffset and datalength field of smbdirectdatatransfer If dataoffset and datalength of smbdirectdatatransfer struct are invalid, out of bounds issue could happen. This patch validate dataoffset and...

EUVD-2025-32405

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...