TencentOS Server 3: insights-client (TSSA-2023:0266)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0266 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-60675

A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823GV1.0.2B0520181207.bin in the timelycheck and sysconf binaries, which process the /tmp/newqos.rule configuration file. The vulnerability occurs because parsed fields from the configuration file are concatenated...

Unprotected temporary directories in Wolfram Cloud version 14.2 may result in privilege escalation

Overview Wolfram Cloud version 14.2 allows Java Virtual Machine JVM unrestricted access to temporary resources in the /tmp/ directory of the cloud environment which may result in privilege escalation, information exfiltration, and remote code execution. In the same cloud instance, temporary...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988731 advisory. In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right buffer number for zoranreapstatcom On the case...

PT-2025-41937

Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 3.6.12 Argo Workflows versions 3.7.0 through 3.7.2 Description Argo Workflows, a container-native workflow engine for Kubernetes, contains a Zip Slip path traversal issue during artifact extraction. The...

Malicious code in tmp-npmsnha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6b7dcde36d84ee5704ed922a7c1b72873a03638a5f31d9e7a57aa2c7c4d2399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tmp-npmsnha is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2025-48005 Malicious code in tmp-npmsnha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6b7dcde36d84ee5704ed922a7c1b72873a03638a5f31d9e7a57aa2c7c4d2399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2014-5336

Malware in sbrugna...

EUVD-2004-0689

Malware in sbrugna...

EUVD-2016-1793

Malware in sbrugna...

EUVD-2013-0039

Malware in sbrugna...

EUVD-2017-0113

Malware in sbrugna...

EUVD-2013-0202

Malware in sbrugna...

EUVD-2018-6548

Malware in sbrugna...

EUVD-2010-2047

Malware in sbrugna...

EUVD-2017-0114

Malware in sbrugna...

EUVD-2012-0458

Malware in sbrugna...

EUVD-2012-3487

Malware in sbrugna...

EUVD-2013-4082

Malware in sbrugna...