825 matches found
VulnCheck KEV: CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
KB5066873: Windows Server 2012 R2 Security Update (October 2025)
The remote Windows host is missing security update 5066873. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
KB5066791: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2025)
The remote Windows host is missing security update 5066791. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
KB5066837: Windows 10 LTS 1507 Security Update (October 2025)
The remote Windows host is missing security update 5066837. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
IGEL OS Use of a Key Past its Expiration Date Vulnerability
IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
CVE-2025-11643
Tomofun Furbo 360 and Furbo Mini are affected by a vulnerability in the MQTT Client Certificate handling of the /squashfs-root/furbo_img component. Manipulation can reveal hard-coded credentials and may be exploitable remotely. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furb...
EUVD-2012-3969
Malware in sbrugna...
EUVD-2012-3968
Malware in sbrugna...
EUVD-2006-5686
Malware in sbrugna...
EUVD-2015-4664
Malware in sbrugna...
EUVD-2020-6461
Malware in sbrugna...
EUVD-2015-4665
Malware in sbrugna...
EUVD-2021-27338
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986881)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986881 advisory. In the Linux kernel, the following vulnerability has been resolved: squashfs: harden sanity check in squashfsreadxattridtable While mounting a corrupted filesystem, ...
Unity Linux 20.1070e Security Update: uboot-tools (UTSA-2025-664209)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-664209 advisory. Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdifft is...
Unity Linux 20.1070e Security Update: squashfs-tools (UTSA-2025-680654)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680654 advisory. squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986578)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986578 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a KMSAN: uninit-value in picklink bug...
Unity Linux 20.1070e Security Update: squashfs-tools (UTSA-2025-680652)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680652 advisory. squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the...