EUVD-2013-6173

Malware in sbrugna...

EUVD-2010-3599

Malware in sbrugna...

EUVD-2009-1462

Malware in sbrugna...

EUVD-2019-8160

Malware in sbrugna...

EUVD-2015-7515

Malware in sbrugna...

EUVD-2017-11285

Malware in sbrugna...

EUVD-2011-3344

Malware in sbrugna...

EUVD-2010-3149

Malware in sbrugna...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680627 advisory. Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically,...

How we trained an ML model to detect DLL hijacking

DLL hijacking is a common technique in which attackers replace a library called by a legitimate process with a malicious one. It is used by both creators of mass-impact malware, like stealers and banking Trojans, and by APT and cybercrime groups behind targeted attacks. In recent years, the numbe...

Detecting DLL hijacking with machine learning: real-world cases

Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...

CVE-2025-9913

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...

CVE-2025-9913 Cross Site Scripting: Session Hijacking

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...

CVE-2025-9913

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...

CVE-2025-9913

CVE-2025-9913 describes a cross-site scripting issue where JavaScript can be executed from the address bar via the dashboard’s “Open in new Tab” button, enabling session hijacking. Affected product family includes SICK Enterprise Analytics and related SICK analytics dashboards (e.g., SICK Baggage...

EUVD-2025-32503

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...

CVE-2025-9913 Cross Site Scripting: Session Hijacking

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...

CVE-2025-23355

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service...

📄 GNU Screen 4.5.0 Local Privilege Escalation

GNU Screen version 4.5.0 local privilege escalation exploit that leverages shared library loading. GNU Screen 4.5.0 Local Privilege Escalation Exploit CVE-2017-5618 📌 Overview Local privilege escalation exploit for GNU Screen 4.5.0 that hijacks shared library loading to gain root access via...

PT-2025-40856

Name of the Vulnerable Software and Affected Versions Dashboard affected versions not specified Description The application is susceptible to session hijacking due to the execution of JavaScript code within the address bar. This is possible through the dashboard's "Open in new Tab" button. This...