SUSE-SU-2025:3951-1 Security update for runc

This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions bsc1252232. - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races bsc1252232. - CVE-2025-52881: Fixed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988901)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988901 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadgets null ptr deref on 10gbps cabling. This avoids a null pointer dereference...

SUSE-SU-2025:03628-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2022-49980: USB: gadget: fix use-after-free read in usbudcuevent...

EUVD-2020-0443

Malware in sbrugna...

EUVD-2020-23777

Malware in sbrugna...

EUVD-2020-0366

Malware in sbrugna...

EUVD-2020-0478

Malware in sbrugna...

EUVD-2020-0399

Malware in sbrugna...

EUVD-2020-0444

Malware in sbrugna...

EUVD-2021-2570

Malware in sbrugna...

EUVD-2012-4321

Malware in sbrugna...

EUVD-2021-2550

Malware in sbrugna...

EUVD-2021-2527

Malware in sbrugna...

EUVD-2021-0490

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987288 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadgets null ptr deref on 10gbps cabling. This avoids a null pointer dereference...

EUVD-2022-5476

Malicious code in bioql PyPI...

Exploit for Path Traversal in Thecartpress Thecartpress_Ecommerce_Shopping_Cart

This is a PoC exploit for CVE-2015-3301, a vulnerability in the Stagefright media library that allows for remote code execution on Android devices. The exploit, called Metaphor, is designed to bypass Address Space Layout Randomization ASLR and execute arbitrary code on the device. The exploit...

peda

This repository is an offensive tool for exploit development. It is a Python Exploit Development Assistance for GDB PED A, which is a script that helps speed up the exploit development process on Linux/Unix. The tool is designed to work with GDB 7.x and Python 2.6+. The tool has various features,...

CVE-2025-58357

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection attacks through multiple vectors: malicious prompt injection pages, compromised MCP server...

CVE-2025-58357 5ire Chat Message XSS Vulnerability Enables Remote Code Execution

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection attacks through multiple vectors: malicious prompt injection pages, compromised MCP server...