CVE-2025-68619 Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore interface allow administrators to install npm packages through a REST API endpoint. While the endpoint validates that the package name exists in the npm registry as a known plugi...

CVE-2025-52666

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error...

EUVD-2004-0535

Malware in sbrugna...

EUVD-2010-0424

Malware in sbrugna...

EUVD-2005-1481

Malware in sbrugna...

EUVD-2008-1405

Malware in sbrugna...

EUVD-2001-1196

Malware in sbrugna...

EUVD-2006-0688

Malware in sbrugna...

EUVD-2004-2510

Malware in sbrugna...

EUVD-2001-1539

Malware in sbrugna...

EUVD-2004-2704

Malware in sbrugna...

EUVD-2006-1524

Malware in sbrugna...

EUVD-2001-1189

Malware in sbrugna...

EUVD-2006-4062

Malware in sbrugna...

EUVD-2008-1113

Malware in sbrugna...

EUVD-2020-20034

Malware in sbrugna...

CLSA-2025-1759145882 Fix CVE(s): CVE-2025-53019

SECURITY UPDATE: memory leak via multiple consecutive %d format specifiers in filename template - debian/patches/CVE-2025-53019.patch: Fix memory leak when entering StreamImage multiple times - CVE-2025-53019...

CLSA-2025-1759145639 Fix CVE(s): CVE-2025-53019

SECURITY UPDATE: memory leak when specifying multiple %d format specifiers in filename template - debian/patches/CVE-2025-53019.patch: Fix memory leak when entering StreamImage multiple times - CVE-2025-53019...

CLSA-2025-1758289815 Fix CVE(s): CVE-2025-53101

SECURITY UPDATE: stack overflow via multiple consecutive %d format specifiers in filename template - debian/patches/CVE-2025-53101.patch: Fix InterpretImageFilename function by adjusting the offset to prevent potential buffer overflow - CVE-2025-53101...

CLSA-2025-1758289801 Fix CVE(s): CVE-2025-53101

SECURITY UPDATE: stack overflow via multiple consecutive %d format specifiers in filename template - debian/patches/CVE-2025-53101.patch: Fix image filename interpretation issue by adjusting the offset value - CVE-2025-53101...