5189 matches found
Malicious code in trevora-cisa-cir7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c786bf399fde2a23d53fa81342e322dabb5aca9410e7b2cbff43719cd7ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-58423
creationtimestamp| type| source ---|---|--- 2025-11-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01 2025-11-07 00:41:46+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4ytsgq2iua2 2025-11-07 02:33:12+00:00| seen|...
CVE-2025-58078
creationtimestamp| type| source ---|---|--- 2025-10-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 2025-10-23 23:28:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3vj7hdql22c...
CVE-2025-62580
creationtimestamp| type| source ---|---|--- 2025-10-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-04 2025-10-29 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-976/...
CVE-2011-20002
creationtimestamp| type| source ---|---|--- 2025-10-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-03 2025-10-27 17:49:08+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-ics-security-advisories-av25-699...
CVE-2025-9068
creationtimestamp| type| source ---|---|--- 2025-10-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-02...
CISA Releases One Industrial Control Systems Advisory
CISA released one Industrial Control Systems ICS advisory on October 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-287-01 Rockwell Automation 1715 EtherNet/IP Comms Module CISA encourages users and...
Rockwell Automation 1715 EtherNet/IP Comms Module
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause the web server to crash, requiring a restart to recover. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.21.0, golang.org/x/net-v0.33.0, golang.org/x/net-v0.34.0 which is vulnerable to this CVE-2025-22870
Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.21.0, golang.org/x/net-v0.33.0, golang.org/x/net-v0.34.0 which is vulnerable to this CVE-2025-22870 Vulnerability Details CVEID:CVE-2025-22870 DESCRIPTION: Matching of hosts against prox...
Rockwell Automation Stratix
RISK EVALUATION Successful exploitation of this vulnerability could result in arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control system...
CVE-2025-58069
creationtimestamp| type| source ---|---|--- 2025-09-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-01...
Mitsubishi Electric MELSEC-Q Series CPU Module
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial of service DoS. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all...
CVE-2025-55068
creationtimestamp| type| source ---|---|--- 2025-09-18 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-07 2025-09-18 21:23:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz5bumc34x2m 2025-11-04 13:26:06+00:00| seen| https://t.me/icscert/1348...
ABB Terra AC Wallbox
SUMMARY ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a write operation to the flash...
CVE-2025-40802
creationtimestamp| type| source ---|---|--- 2025-09-11 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-04...
CVE-2025-40803
creationtimestamp| type| source ---|---|--- 2025-09-11 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-04...
CVE-2024-26736
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...
CVE-2024-13090
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-09...
Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...