📄 Transmission Torrent Parsing Integer Overflows

Torrent file parsing in Transmission suffers from multiple integer overflow vulnerabilities. I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtyp...

[SECURITY] Fedora 42 Update: python-socketio-5.14.1-1.fc42

Socket.IO is a transport protocol that enables real-time bidirectional event-based communication between clients typically, though not always, web browsers and a server. The official implementations of the client and server components are written in JavaScript. This package provides Python...

CVE-2021-22291 EIBPORT Reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2...

EUVD-2021-0375

Malware in sbrugna...

EUVD-2021-14180

Malware in sbrugna...

EUVD-2007-0952

Malware in sbrugna...

EUVD-2002-1022

Malware in sbrugna...

EUVD-2021-0280

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414416 advisory. Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data...

EUVD-2025-2626

Malicious code in bioql PyPI...

EUVD-2022-30039

Malicious code in bioql PyPI...

EUVD-2022-34211

Malicious code in bioql PyPI...

EUVD-2023-57398

Malicious code in bioql PyPI...

EUVD-2024-16001

Malicious code in bioql PyPI...

CVE-2025-7779

CVE-2025-7779: Local privilege escalation due to insecure XPC service configuration. Affects Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, and Acronis True Image for Western Digital (macOS) before build 42197. Remediation: upgrade to bui...

SUSE SLES15: nv-prefer-signed-open-driver / etc (SUSE-SU-2025:03424-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03424-1 advisory. Updated CUDA variant to 580.82.07: - CVE-2025-23277: Fixed access memory outside bounds permitted under normal use cases in NVIDIA...

SUSE-SU-2025:03424-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Updated CUDA variant to 580.82.07: - CVE-2025-23277: Fixed access memory outside bounds permitted under normal use cases in NVIDIA Display Driver bsc1247528. - CVE-2025-23278: Fixed improper index validation by issuing a ca...

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks

Telecommunications and manufacturing sectors in Central and South Asian countries have emerged as the target of an ongoing campaign distributing a new variant of a known malware called PlugXaka Korplug or SOGU. "The new variant's features overlap with both the RainyDay and Turian backdoors,...

XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory

Microsoft Threat Intelligence has identified yet another XCSSET variant in the wild that introduces further updates and new modules beyond those detailed in our March 2025 blog post. The XCSSET malware is designed to infect Xcode projects, typically used by software developers, and run while an...

SUSE-SU-2025:20741-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Update non-CUDA variant to 580.82.07 bsc1249235 Update non-CUDA variant to 580.76.05 bsc1247907 - get rid of rule of older KMPs not to load nvidiadrm module, which are still installed in parallel and therefore still active...