EUVD-2017-8291

Malware in sbrugna...

EUVD-2021-20863

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987083 advisory. In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descriptor list is a shared...

EUVD-2025-32563

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60963

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60962

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60961

Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60956

Cross Site Request Forgery CSRF vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

Reemo Unveils Bastion+: A Scalable Solution for Global Privileged Access Management

Paris, France, 6th October 2025, CyberNewsWire...

Detecting DLL hijacking with machine learning: real-world cases

Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...

CVE-2025-60960

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60962

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60969

Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...

CVE-2025-60957

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

CVE-2025-60967

A Cross Site Scripting (XSS) vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically affecting firmware F/W 6010-0076-000 Ver 4.00 . The flaw stems from the improper neutralization of input during web page generation , which could allow an attacker to g...

PT-2025-40933

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description A directory traversal issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS firmware version 4.00. This allows attackers to potentially access...

CVE-2025-60965

The EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically firmware F/W 6010-0071-000 Ver 4.00 , is vulnerable to an OS Command Injection vulnerability. This flaw allows an attacker to execute arbitrary code, cause a denial of service, gain escalated privileges, and access sensit...

wireshark:fuzzshark_ip: Global-buffer-overflow in probe_possible_records

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6658688917241856 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

wireshark:fuzzshark_ip: Global-buffer-overflow in dissect_asterix_record

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5430949228904448 Project: wireshark Fuzzing Engine: honggfuzz Fuzz Target: fuzzsharkip Job Type: honggfuzzasanwireshark Platform Id: linux Crash Type:...

mruby:mruby_fuzzer: Global-buffer-overflow in gen_addsub

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4591125819359232 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5954a2c047ac Crash State...