EUVD-2013-1577

Malware in sbrugna...

EUVD-2008-2395

Malware in sbrugna...

EUVD-2009-4015

Malware in sbrugna...

EUVD-2019-16403

Malware in sbrugna...

EUVD-2016-9895

Malware in sbrugna...

EUVD-2018-7337

Malware in sbrugna...

EUVD-2014-9160

Malware in sbrugna...

EUVD-2014-4146

Malware in sbrugna...

EUVD-2018-14515

Malware in sbrugna...

EUVD-2011-4515

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986384)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986384 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...

Insufficient Session Expiration

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Insufficient Session Expiration in the "Remember Me" realm setting. An attacker with a long-lived "Remember M...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986767 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Map EFI-reserved memory as encrypted for SEV Some drivers require memory that is...

Clash Verge Rev security vulnerability

Clash Verge Rev is an open source proxy tool from Clash Verge Rev. A security vulnerability exists in Clash Verge Rev 2.2.3 and earlier versions, which stems from installing system services by default and exposing critical functionality via an unauthorized HTTP API, which could lead to local...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +194 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.4.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =0.2.0, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =1.4.11 - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 and more Source cves: CVE-2025-11429 Source...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986392 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987282 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...

EUVD-2025-32545

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...

CVE-2025-0038

The CVE-2025-0038 entry corresponds to AMD Zynq UltraScale+ devices where the PMU Firmware’s CSU runtime services do not validate memory addresses. Connected sources (AMD-SB-8008 and related records) confirm that memory pointers issued to CSU runtime commands can bypass access controls, allowing ...

Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers

Cybersecurity researchers have shed light on a Chinese-speaking cybercrime group codenamed UAT-8099 that has been attributed to search engine optimization SEO fraud and theft of high-value credentials, configuration files, and certificate data. The attacks are designed to target Microsoft Interne...