EUVD-2020-19913

Malware in sbrugna...

RockyLinux 10 : libblockdev (RLSA-2025:9328)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9328 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the...

PT-2025-40920

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access and IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.9.0 IBM Security Verify Access and IBM Security Verify Access Docker versions 11.0.0.0 through 11.0.1.0 Description A locally authenticated user ma...

EUVD-2022-52828

Malicious code in bioql PyPI...

EUVD-2025-21896

Malicious code in bioql PyPI...

EUVD-2025-18225

Malicious code in bioql PyPI...

EUVD-2025-10680

Malicious code in bioql PyPI...

EUVD-2022-27100

Malicious code in bioql PyPI...

EUVD-2025-27710

Malicious code in bioql PyPI...

EUVD-2025-26135

Malicious code in bioql PyPI...

EUVD-2025-25802

Malicious code in bioql PyPI...

EUVD-2024-32860

Malicious code in bioql PyPI...

EUVD-2022-52835

Malicious code in bioql PyPI...

EUVD-2025-9293

Malicious code in bioql PyPI...

EUVD-2025-26622

Malicious code in bioql PyPI...

CVE-2025-53881

CVE-2025-53881 affects the exim package on openSUSE/openSUSE Tumbleweed. The vulnerability is a UNIX Symbolic Link (Symlink) Following issue in the logrotate configuration, enabling privilege escalation from the mail user/group to root. Affected OpenSUSE advisories reference exim versions prior t...

CVE-2025-53881

A UNIX Symbolic Link Symlink Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1...

An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update.

...

AZL-93039 CVE-2025-41244 affecting package open-vm-tools for versions less than 12.3.5-3

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...

Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell

!/usr/bin/env python Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell Vendor: Ilevia Srl. Product web page: https://www.ilevia.com Affected version: = 4.7.18.0.eden Logic ver: 6.00 Summary: EVE is a smart home and building automation solution designed for both residential and commercial...