EUVD-2008-2296

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987213 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix the svcdeferredevent trace class Fix a NULL deref crash that occurs when an svcrqst i...

EUVD-2021-8860

Malicious code in bioql PyPI...

EUVD-2022-31069

Malicious code in bioql PyPI...

EUVD-2023-56242

Malicious code in bioql PyPI...

EUVD-2023-37359

Malicious code in bioql PyPI...

EUVD-2024-46708

Malicious code in bioql PyPI...

EUVD-2024-45414

Malicious code in bioql PyPI...

September 9, 2025-KB5064403 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2

September 9, 2025-KB5064403 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2 IMPORTANT This update was originally released in the Security and Quality Rollup that’s dated August 26, 2025. This update is included in the Security and Quali...

Malicious code in svg-presentation (npm)

The package svg-presentation was found to contain malicious code...

MAL-2025-34256 Malicious code in svg-presentation (npm)

The package svg-presentation was found to contain malicious code...

The vulnerability of the gf_ac4_presentation_ch_mode function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the gfac4presentationchmode function in the MP4Box utility of the GPAC multimedia platform is related to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Report from the Cambridge Cybercrime Conference

The Cambridge Cybercrime Conference was held on 23 June. Summaries of the presentations are here...

Exploit for Use After Free in Microsoft

KTMPOCS This repo contains reports for CVE 2024-43570http...

MAL-2025-4664 Malicious code in new-presentation-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542a173ba956753bc3d1570cb407b09ae92c7d5690bfacf0aa1bc2aa01f94990 Any computer that has this package installed or running should be considered...

Malicious code in new-presentation-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542a173ba956753bc3d1570cb407b09ae92c7d5690bfacf0aa1bc2aa01f94990 Any computer that has this package installed or running should be considered...

CVE-2024-51578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lpagg 3D Presentation 3d-presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through = 1.0...

CVE-2023-33176

BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery SSRF vulnerability. In an insertDocument API request the user is able to supply a URL from which the presentation should be...

CVE-2019-3933

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting /images/browserslide.jpg via HTTP. A remote, unauthenticated attacker can use this vulnerability to watch a slideshow without knowing the access code...

CVE-2019-3928

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attacker can use this vulnerability to access a restricted presentation or to become the presenter...