CVE-2025-23364

creationtimestamp| type| source ---|---|--- 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-03 2025-07-17 17:31:50+00:00| seen| https://t.me/icscert/1240...

CVE-2025-52579

creationtimestamp| type| source ---|---|--- 2025-07-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 2025-07-08 20:03:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lti3tu3ut324...

CVE-2025-48496

creationtimestamp| type| source ---|---|--- 2025-07-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01...

CVE-2025-46358

creationtimestamp| type| source ---|---|--- 2025-07-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 2025-07-08 20:03:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lti3tu3ut324...

CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of flaws is as follows - CVE-2014-3931 CVSS score: 9.8 - A buffer overflow...

Siemens Solid Edge

SUMMARY Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or CFG format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a...

Siemens SINEC NMS

SUMMARY Siemens SINEC NMS before V4.0 is affected by multiple vulnerabilities which could allow an attacker to elevate privilege and exceute arbitrary code. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. Siemens is preparing further fix versions...

Manufacturing Security: Why Default Passwords Must Go

If you didn't hear about Iranian hackers breaching US water facilities, it's because they only managed to control a single pressure station serving 7,000 people. What made this attack noteworthy wasn't its scale, but how easily the hackers gained access — by simply using the manufacturer's defaul...

webkitgtk: type confusion may lead to arbitrary code execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution due to a type confusion issue. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

CVE-2025-5241

creationtimestamp| type| source ---|---|--- 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-04 2025-07-03 20:06:26+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lt3josunrt2h...

What CISA’s BOD 25-01 Means for API Security and How Wallarm Can Help

The US government has taken another significant step towards strengthening cloud security with the release of CISA’s Binding Operational Directive BOD 25-01. Aimed at improving the security posture of federal cloud environments, BOD 25-01 mandates robust configuration, visibility, and control...

Mitsubishi Electric MELSEC iQ-F Series

RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service condition for legitimate users for a certain period by repeatedly attempting to log in with incorrect passwords. When the product repeatedly receives unauthorized logins from an attacker, legitimate...

Mitsubishi Electric MELSOFT Update Manager (Update B)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, disclose information, alter information, or cause a denial-of-service DoS condition. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-6554link is external Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors an...

CVE-2022-31803

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-03...

CVE-2022-43110

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05 2025-07-03 09:00:05+00:00| published-proof-of-concept| Telegram/znB4-XOdj2zO7XoRIW291Bfd7B-PZY583Bp9gcjE51XJa2A 2025-08-23 00:33:26+00:00| seen|...

CVE-2022-31804

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-03...

CVE-2022-31802

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-03...

Voltronic Power and PowerShield UPS monitoring software

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an unauthenticated attacker remotely to make configuration changes, resulting in shutting down UPS connected devices or execution of arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures...

CVE-2025-6522

creationtimestamp| type| source ---|---|--- 2025-06-26 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02 2025-06-26 20:04:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lsjwd5nqsj2a 2025-06-27 20:44:27+00:00| seen|...