719 matches found
kernel: kernfs: Fix UAF in polling when open file is released
A use-after-free race condition exists in the linux kernel such that When cgroup.pressure is disabled, it releases PSI triggers via cgroupfilerelease, Frees of-priv through kernfsdrainopenfiles leading to damage to the availability and integrity of the system...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990923)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990923 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under...
kernel: kernfs: Fix UAF in polling when open file is released
A use-after-free race condition exists in the linux kernel such that When cgroup.pressure is disabled, it releases PSI triggers via cgroupfilerelease, Frees of-priv through kernfsdrainopenfiles leading to damage to the availability and integrity of the system...
kernel: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to devioctl first and later forwarded to brioctlcall, which causes unnecessary RTNL dance and the splat below 0 under RTNL pressure. Let's say Thread A...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989819)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989819 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/psi: Fix use-after-free in epremovewaitqueue If a non-root cgroup gets removed when there i...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988983)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988983 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under...
kernel: kernfs: Fix UAF in polling when open file is released
A use-after-free race condition exists in the linux kernel such that When cgroup.pressure is disabled, it releases PSI triggers via cgroupfilerelease, Frees of-priv through kernfsdrainopenfiles leading to damage to the availability and integrity of the system...
CVE-2025-6176
Scrapy versions up to 2.13.2 are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of...
The Death of the Security Checkbox: BAS Is the Power Behind Real Defense
Security doesn't fail at the point of breach. It fails at the point of impact. That line set the tone for this year's Picus Breach and Simulation BAS Summit , where researchers, practitioners, and CISOs all echoed the same theme: cyber defense is no longer about prediction. It's about proof. When...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Handling of Exceptional Conditions (CVE-2024-50001)
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi- packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...
EUVD-2022-54534
In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Allocate/free queue resource only during probe/remove Currently, the sub-queues and event pool resources are allocated/freed for every CRQ connection event such as reset and LPM. This exposes the driver to a couple...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987673)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987673 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under...
When the Call Comes from Inside: The Rising Threat of Insider Recruitment in Ransomware Campaigns
In cybersecurity, we often say that attackers only need to be right once – and defenders need to be right every time. Traditionally, we’ve focused on perimeter breaches, phishing campaigns, and zero-day exploits. But increasingly, attackers are bypassing these hardened defenses and taking a...
CVE-2025-52960 Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash
A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...
PT-2025-41399
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 22.4R3-S7 Juniper Networks Junos OS versions 23.2 through 23.2R2-S4 Juniper Networks Junos OS versions 23.4 through 23.4R2-S5 Juniper Networks Junos OS versions 24.2 through 24.2R2 Description A buff...
EUVD-2020-3048
Malware in sbrugna...
EUVD-2017-3193
Malware in sbrugna...
EUVD-2015-7869
Malware in sbrugna...