EUVD-2014-8494

Malware in sbrugna...

EUVD-2018-3436

Malware in sbrugna...

EUVD-2018-3433

Malware in sbrugna...

EUVD-2007-5204

Malware in sbrugna...

EUVD-2018-3435

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987254 advisory. In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if...

EUVD-2025-22953

Malicious code in bioql PyPI...

EUVD-2022-3252

Malicious code in bioql PyPI...

EUVD-2023-50942

Malicious code in bioql PyPI...

EUVD-2025-7833

Malicious code in bioql PyPI...

EUVD-2022-49664

Malicious code in bioql PyPI...

EUVD-2023-31254

Malicious code in bioql PyPI...

Nextcloud: tabnabbing in roundcube webmail

A tab nabbing vulnerability was discovered in Roundcube webmail. This vulnerability allowed a malicious website opened in a new tab to access the initial tab and change its location. This could be exploited to perform phishing attacks...

CVE-2025-59754

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

PT-2025-40375

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the...

AndSoft e-TMS 命令注入漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of parameter m in file /clt/LOGINFRMoriginal.ASP, which can be exploited by an attacker to execute operating system...

PT-2025-40359

Name of the Vulnerable Software and Affected Versions AndSoft's e-TMS version 25.03 Description An operating system command injection issue exists in AndSoft's e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is exploitable by sending a PO...

CVE-2025-39906

CVE-2025-39906 relates to the Linux kernel drm/amd/display path where the OEM I2C adapter could remain registered after GPU unbind, risking a null pointer dereference when apps access the invalid device. The issue has been fixed by removing the OEM I2C adapter on process finish (cherry-pick of co...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to remove the oem i2c adapter, which could result in a null pointer dereference...

CVE-2025-47910

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections...