EUVD-2020-0017

Malware in sbrugna...

EUVD-2007-0190

Malware in sbrugna...

EUVD-2010-1254

Malware in sbrugna...

EUVD-2003-0380

Malware in sbrugna...

EUVD-2020-0117

Malware in sbrugna...

EUVD-2016-1781

Malware in sbrugna...

Exploit for CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Ov...

EUVD-2025-29668

Malicious code in bioql PyPI...

EUVD-2023-1593

Malicious code in bioql PyPI...

EUVD-2022-39613

Malicious code in bioql PyPI...

EUVD-2025-24235

Malicious code in bioql PyPI...

EUVD-2022-1081

Malicious code in bioql PyPI...

EulerOS 2.0 SP10 : sudo (EulerOS-SA-2025-2088)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute...

CVE-2025-23344

CVE-2025-23344 affects NVIDIA NVDebug tool. The vulnerability may allow an attacker to run code on the platform host as a non-privileged user, with potential for code execution, DoS, privilege escalation, information disclosure and data tampering. NVIDIA PSIRT notes affected NVIDIA NVDebug tool v...

Improper Access Control

github.com/aws/amazon-ecs-agent is vulnerable to improper access control. The vulnerability is due to the introspection server being accessible off-host under certain security group configurations, which allows an attacker from another instance to gain unauthorized access to the server...

CVE-2025-58059

Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to:...

CVE-2025-58059 Valtimo scripting engine can be used to gain access to sensitive data or resources

Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to:...

Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3

Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an attacker to break out of the confines of a container. The vulnerability, tracked as CVE-2025-9074 , carries a CVSS score of 9.3 out of 10.0. It has...

CVE-2025-57802 Airlink's Daemon Symlink Vulnerability

Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel. In version 1.0.0, an attacker with access to the affected container can create symbolic links inside the mounted directory /app/data. Because the container bind-mounts an...

SUSE CVE-2025-9039

We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that include the port where the server is...