Traefik has a Potential mTLS Bypass via Fragmented TLS ClientHello Causing Pre-SNI Sniff Fallback to Default Non-mTLS TLS Config

Summary There is a potential vulnerability in Traefik's TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When a TLS ClientHello is fragmented across multiple records, Traefik's SNI extraction may fail with an EOF and return an empty SNI. The TCP router then falls back to the...

Azure Linux 3.0 Security Update: kernel (CVE-2024-24859)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24859 advisory. - A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004259 advisory. The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004379 advisory. A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003350 advisory. The netlinkdelivertapskb function in net/netlink/afnetlink.c in the Linux kernel through 4.14.4, when CONFIGNLMON is enabled, does not restrict observations of Netli...

Unity Linux 20.1060e Security Update: kernel (UTSA-2025-992524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992524 advisory. A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991278 advisory. A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly...

Siemens SIMATIC Devices Race Condition (CVE-2024-24859)

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

EUVD-2001-1091

Malware in sbrugna...

EUVD-2004-0279

Malware in sbrugna...

EUVD-2025-30306

Malicious code in bioql PyPI...

EUVD-2021-34029

Malicious code in bioql PyPI...

CVE-2025-9883

The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web script...

CVE-2025-9883 Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web script...

CVE-2025-9883

The CVE-2025-9883 entry concerns the WordPress plugin Browser Sniff (versions

CVE-2025-9883 Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web script...

WordPress Browser Sniff plugin <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Browser Sniff versions = 2.3...

WordPress plugin Browser Sniff 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-38635

Name of the Vulnerable Software and Affected Versions Browser Sniff versions prior to 2.3 Description The Browser Sniff plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on a function. This allows unauthenticated attackers to update...

Linux Distros Unpatched Vulnerability : CVE-2025-32052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over- read. CVE-2025-32052 Note that Nessus relies on the...