EUVD-2018-8972

Malware in sbrugna...

EUVD-2004-0428

Malware in sbrugna...

EUVD-2015-4227

Malware in sbrugna...

EUVD-2012-2949

Malware in sbrugna...

EUVD-2014-8315

Malware in sbrugna...

EUVD-2017-18725

Malware in sbrugna...

EUVD-2021-10423

Malware in sbrugna...

EUVD-2004-2525

Malware in sbrugna...

EUVD-2009-0591

Malware in sbrugna...

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool allows a attacker to execute arbitrary GET requests.

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to execute arbitrary GET requests remotely...

Grafana 8.0.x < 8.0.7 / 8.1.x < 8.1.8 / 8.2.x < 8.2.7 / 8.3.x < 8.3.1 Path Traversal

Grafana version 8.0.x prior to 8.0.7, 8.1.x prior to 8.1.8, 8.2.x prior to 8.2.7, and 8.3.x prior to 8.3.1 are vulnerable to a path traversal issue that could allow an attacker to read arbitrary files on the host system that Grafana has access to. A remote attacker could exploit this vulnerabilit...

ROS-20251007-04

A vulnerability in GLPI's computer hardware request, incident, and inventory system is related to a key-based authorization bypass. key authorization. Exploitation of the vulnerability could allow a remote intruder, compromise the system Vulnerability in the GLPI computer equipment request,...

Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2025-2226 Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities October 7, 2025 CVE Number CVE-2025-54401,CVE-2025-54400,CVE-2025-54399,CVE-2025-54402 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd...

Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-986135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986135 advisory. A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an intege...

PT-2025-41001

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Several stack-based buffer overflow issues are present in the formPingCmd functionality. An attacker can exploit these by sending specially crafted HTTP requests. The buffer overflow is related ...

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

Unity Linux 20.1070e Security Update: resource-agents (UTSA-2025-984791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984791 advisory. Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-craft...

Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-986133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986133 advisory. A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's reques...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987107 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP...

Planet WGR-500 formPingCmd OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2025-2229 Planet WGR-500 formPingCmd OS command injection vulnerabilities October 7, 2025 CVE Number CVE-2025-54406,CVE-2025-54405 SUMMARY Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A...