PT-2025-41466

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange affected versions not specified Description Newforma Info Exchange accepts serialized .NET data via the /remoteweb/remote.rem API endpoint without proper validation. This allows a remote, unauthenticated attacker to...

K000156952: Apache Tomcat vulnerability CVE-2025-55668

Security Advisory Description Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgra...

EUVD-2016-2039

Malware in sbrugna...

EUVD-2006-6287

Malware in sbrugna...

EUVD-2019-3263

Malware in sbrugna...

EUVD-2021-24901

Malware in sbrugna...

EUVD-2007-6650

Malware in sbrugna...

EUVD-2011-1150

Malware in sbrugna...

EUVD-2008-6268

Malware in sbrugna...

EUVD-2020-23996

Malware in sbrugna...

EUVD-2025-28180

Malicious code in bioql PyPI...

EUVD-2025-13626

Malicious code in bioql PyPI...

EUVD-2025-7908

Malicious code in bioql PyPI...

EUVD-2022-3252

Malicious code in bioql PyPI...

EUVD-2025-24574

Malicious code in bioql PyPI...

EUVD-2024-45619

Malicious code in bioql PyPI...

Security Bulletin: Vulnerabilities in Apache Tomcat and form-data might affect IBM Storage Defender Copy Data Management.

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Apache Tomcat and form-data. Vulnerabilities include a memory leak which result in a denial of service, possible for a specially crafted request to bypass some rewrite rules which could be bypassed security...

BadIIS Malware Spreads via SEO Poisoning — Redirects Traffic, Plants Web Shells

Cybersecurity researchers are calling attention to a search engine optimization SEO poisoning campaign likely undertaken by a Chinese-speaking threat actor using a malware called BadIIS in attacks targeting East and Southeast Asia, particularly with a focus on Vietnam. The activity, dubbed...

BadIIS Malware Spreads via SEO Poisoning — Redirects Traffic, Plants Web Shells

Cybersecurity researchers are calling attention to a search engine optimization SEO poisoning campaign likely undertaken by a Chinese-speaking threat actor using a malware called BadIIS in attacks targeting East and Southeast Asia, particularly with a focus on Vietnam. The activity, dubbed...

CVE-2025-39870

Mode C: The CVE-2025-39870 is a Linux kernel vulnerability in dmaengine: idxd, where a double free could occur in idxd_setup_wqs() due to error handling paths (conf_dev uninitialized when max_wqs