20974 matches found
EUVD-2017-8673
Malware in sbrugna...
EUVD-2006-2231
Malware in sbrugna...
EUVD-2018-3338
Malware in sbrugna...
EUVD-2005-2238
Malware in sbrugna...
EUVD-2008-6487
Malware in sbrugna...
EUVD-2009-2573
Malware in sbrugna...
EUVD-2020-27161
Malware in sbrugna...
PT-2025-40997
Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description A format string vulnerability exists in the formPingCmd functionality. A series of specially crafted HTTP requests can lead to memory corruption. An attacker can trigger this by sending a series...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986671)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986671 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-427850)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-427850 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Change nlapolicy for bearer-related names to NLANULSTRING syzbot reported the following...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986531)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986531 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usbstringcopy Userspace provided string 's' coul...
Planet WGR-500 安全漏洞
The Planet WGR-500 is a WiFi router from Planet Corporation of Taiwan, China. A security vulnerability exists in the Planet WGR-500 v1.3411b190912 version, which stems from a formatted string vulnerability in the formPingCmd function, which could lead to memory corruption...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987333)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987333 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message Use the string machinery...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986857)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986857 advisory. In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Fix NULL sring after live migration A NAPI is setup for each network sring to poll...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-408084)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-408084 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is alway...
Planet WGR-500 formPingCmd format string vulnerability
Talos Vulnerability Report TALOS-2025-2228 Planet WGR-500 formPingCmd format string vulnerability October 7, 2025 CVE Number CVE-2025-48826 SUMMARY A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests c...
CLSA-2025-1759782690 Fix CVE(s): CVE-2025-55298
SECURITY UPDATE: format string bug vulnerability in InterpretImageFilename function - debian/patches/CVE-2025-55298.patch: Fix PercentNInvalidOperation and IsValidFormatSpecifier to handle invalid arguments in InterpretImageFilename - CVE-2025-55298...
uscc-binary-exploits
Binary Exploitation Framework A comprehensive collection of t...
(Pwn2Own) Redis Lua Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Redis. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of certain string values by the embedded Lua interpreter. The issue results from the...
