EUVD-2014-7373

Malware in sbrugna...

EUVD-2013-7042

Malware in sbrugna...

EUVD-2014-6845

Malware in sbrugna...

EUVD-2017-10684

Malware in sbrugna...

EUVD-2017-15620

Malware in sbrugna...

EUVD-2020-3339

Malware in sbrugna...

EUVD-2021-2058

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2025-986160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986160 advisory. Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subjec...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986548 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe sensitive data on failure Wipe sensitive data from stack also if the copytouser...

WordPress WP Reset plugin <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log vulnerability

Unauthenticated Sensitive Information Exposure via wf-licensing.log vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin WP Reset versions = 2.05...

EUVD-2025-32572

Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...

EUVD-2025-32569

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...

Elasticsearch 8.18.8, 8.19.5, 9.0.8, 9.1.5 Security Update (ESA-2025-18)

Elasticsearch Insertion of sensitive information in log file ESA-2025-18 Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API Affected Versions: 7.x: All versions from 7.0.0 and u...

CVE-2025-58591 Path Traversal

A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information...

CVE-2025-58590 Path traversal

It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information...

CVE-2025-58585

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...

CVE-2025-58584

CVE-2025-58584 pertains to credentials transmitted in the URL as parameters in HTTP requests, which can be logged or cached by servers, browsers, or proxies. Connected docs associate this with SICK Enterprise Analytics and SICK Logistic Analytics products and indicate a risk of disclosure of user...

CVE-2025-58584 Plain Text Transmission of Username and Password in the URL

In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...

CVE-2025-60956

Cross Site Request Forgery CSRF vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

PT-2025-40865

Name of the Vulnerable Software and Affected Versions Enterprise Web Application affected versions not specified Description The application has multiple endpoints with sensitive information that do not require authentication. This lack of authentication makes the application susceptible to...