Linux Distros Unpatched Vulnerability : CVE-2025-59728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call...

EUVD-2017-14879

Malware in sbrugna...

EUVD-2017-18535

Malware in sbrugna...

EUVD-2004-0967

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986946 advisory. In the Linux kernel, the following vulnerability has been resolved: can: peakpci: peakpciremove: fix UAF When remove the module peekpci, referencing 'chan' again aft...

EUVD-2023-38265

Malicious code in bioql PyPI...

EUVD-2025-32307

Malicious code in bioql PyPI...

CVE-2025-52424

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

UBUNTU-CVE-2025-10729

The module will parse a node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free...

Apple Security Update: watchOS 26.0.2

Apple recommends to install security update watchOS 26.0.2 on devices Apple Watch Series 6 and later...

CVE-2023-53377 cifs: prevent use-after-free by freeing the cfile later

In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2compoundop we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress testing with KASAN enabled kernel. Fixin...

CVE-2025-55739

api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© PBX. In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed the same FreePBX RPM or DEB package. An...

PT-2025-40529

Name of the Vulnerable Software and Affected Versions Qt versions 6.7.0 through 6.9.0 Qt6-svg qtsvg-opensource-src Description The issue is a use-after-free condition within the Qt framework, specifically related to the parsing of SVG files. The renderPattern function and the SVG module are...

CVE-2025-29887 QuRouter 2.5

A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...

Linux Distros Unpatched Vulnerability : CVE-2020-25599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. There are evtchnreset race conditions. Uses of EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftres...

PT-2025-34922 · Unknown · Alexvtn Chatbox Manager

Name of the Vulnerable Software and Affected Versions: alexvtn Chatbox Manager versions through 1.2.6 Description: The software contains a Stored Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts...

PT-2025-34910 · Unknown · Bold Page Builder

Name of the Vulnerable Software and Affected Versions: Bold Page Builder versions through 5.4.3 Description: A Stored Cross-site Scripting XSS issue exists in Bold Page Builder. This allows for the injection of malicious scripts into web pages. Recommendations: Update Bold Page Builder to a versi...

PT-2025-34820 · WordPress · Siteseo – Seo Simplified

Name of the Vulnerable Software and Affected Versions: SiteSEO – SEO Simplified plugin for WordPress versions up to and including 1.2.7 Description: The SiteSEO – SEO Simplified plugin for WordPress is susceptible to Stored Cross-Site Scripting due to a broken preg replace expression and...

PT-2025-34269

Name of the Vulnerable Software and Affected Versions: PandoraNext-TokensTool versions 0.6.8 and earlier Description: An authentication bypass allows an attacker to access the API without a token. Recommendations: Update to a version later than 0.6.8...

Linux Distros Unpatched Vulnerability : CVE-2023-21899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior t...