EUVD-2018-17293

Malware in sbrugna...

EUVD-2017-8342

Malware in sbrugna...

EUVD-2021-24724

Malware in sbrugna...

EUVD-2018-2990

Malware in sbrugna...

EUVD-2004-1355

Malware in sbrugna...

EUVD-2024-54220

Malicious code in bioql PyPI...

EUVD-2024-32611

Malicious code in bioql PyPI...

EUVD-2022-44774

Malicious code in bioql PyPI...

EUVD-2025-9960

Malicious code in bioql PyPI...

EUVD-2023-45823

Malicious code in bioql PyPI...

EUVD-2025-8727

Malicious code in bioql PyPI...

EUVD-2025-14300

Malicious code in bioql PyPI...

DNN Vulnerable to Stored XSS Using Backend Admin Credentials

Summary Users that can edit modules could set a title that includes scripts. Description Some users administrators and content editors can set html in module titles and that could include javascript which could be used for XSS based attacks. With the addition of more roles being able to set modul...

DNN allows loading unused themes on anonymous clients through query parameters

Summary Arbitrary themes can be loaded through query parameters. If an installed theme had a vulnerability, even if it was not used on any page, this could be loaded on unsuspecting clients without knowledge of the site owner. Details Many people who run DNN sites have a number of installed theme...

Access API Moves to Spring Security Access

Five years ago, Spring Security began the journey of modernizing its authorization API. This has paved the way for a number of exciting features like Authorized POJOs, value masking, and, planned for Spring Security 7, Multi-Factor Authentication. This also deprecated the majority of the Access...

fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on August 19, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-231-01 Siemens Desigo CC Product Family and SENTRON Powermanager ICSA-25-231-02 Siemen...

Linux Distros Unpatched Vulnerability : CVE-2018-10938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to...

Siemens Mendix SAML Module

SUMMARY Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...

Linux Distros Unpatched Vulnerability : CVE-2023-53055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: destroy keyring after securitysbdelete fscryptdestroykeyring must be called after all potentially-encrypted inodes were evicted; otherwise it cannot...