EUVD-2021-0968

Malware in sbrugna...

EUVD-2021-2118

Malware in sbrugna...

EUVD-2019-1988

Malware in sbrugna...

EUVD-2019-1949

Malware in sbrugna...

EUVD-2019-1944

Malware in sbrugna...

EUVD-2019-0055

Malware in sbrugna...

EUVD-2020-8267

Malware in sbrugna...

EUVD-2017-14750

Malware in sbrugna...

EUVD-2019-1922

Malware in sbrugna...

EUVD-2019-1818

Malware in sbrugna...

EUVD-2018-1986

Malware in sbrugna...

EUVD-2019-2035

Malware in sbrugna...

EUVD-2019-10145

Malware in sbrugna...

EUVD-2019-1907

Malware in sbrugna...

Unity Linux 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2025-984682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984682 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in...

CVE-2025-10363 Unauthenticated RCE via .NET Deserialization in Topal Finance Software

Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00...

CVE-2024-56804

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

Weak Password Requirements

Overview Affected versions of this package are vulnerable to Weak Password Requirements via manipulation of the Senha/Confirmação da senha argument in the User Creation Page. An attacker can bypass strong password requirements by submitting weak passwords during user account creation. Remediation...

Improper Authentication

Overview @samanhappy/mcphub is an A hub server for mcp servers Affected versions of this package are vulnerable to Improper Authentication via the handleSseConnection function. An attacker can gain unauthorized access and potentially compromise confidentiality, integrity, and availability by...

Command Injection

Overview @samanhappy/mcphub is an A hub server for mcp servers Affected versions of this package are vulnerable to Command Injection via the serverController.ts process. A user can execute arbitrary operating system commands by supplying crafted input to the command or args parameters. Remediatio...