Siemens MS/TP Point Pickup Module

SUMMARY MS/TP Point Pickup Module devices are affected by a denial of service vulnerability that could be triggered by an attacker residing in the same BACnet network by sending a specially crafted MSTP message. A power cycle is required to restore the device's normal operation. Siemens...

CVE-2025-4098

creationtimestamp| type| source ---|---|--- 2025-05-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-01 2025-05-08 18:24:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15579 2025-05-08 19:45:37+00:00| seen|...

Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA

CISA warns of active exploitation of critical Langflow vulnerability CVE-2025-3248. Critical RCE flaw allows full server takeover. Patch…...

About Remote Code Execution & Arbitrary File Reading – Apache HTTP Server (CVE-2024-38475) vulnerability

About Remote Code Execution & Arbitrary File Reading - Apache HTTP Server CVE-2024-38475 vulnerability. Improper escaping of output in modrewrite module leads to remote code execution or arbitrary file reading. Successful exploitation does not require authentication. Apache HTTP Server 2.4.60,...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on May 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-126-01 Optigo Networks ONS NC600 ICSA-25-126-02 Milesight UG65-868M-EA ICSA-25-126-03...

CVE-2025-3925

creationtimestamp| type| source ---|---|--- 2025-05-06 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-03 2025-05-07 21:25:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomdj37jw7a2 2025-05-08...

CVE-2025-4041

creationtimestamp| type| source ---|---|--- 2025-05-06 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-01 2025-05-06 17:16:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462019079175066 2025-05-06 18:21:37+00:00| seen|...

CVE-2025-4043

creationtimestamp| type| source ---|---|--- 2025-05-06 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-02 2025-05-07 21:25:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomdj4swcov2 2025-05-08...

Critical Langflow Flaw Added to CISA KEV List Amid Ongoing Exploitation Evidence

A recently disclosed critical security flaw impacting the open-source Langflow platform has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA, citing evidence of active exploitation. The vulnerability, tracked as...

Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation Confirmed

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a maximum-severity security flaw impacting Commvault Command Center to its Known Exploited Vulnerabilities KEV catalog, a little over a week after it was publicly disclosed. The vulnerability in question is CVE-2025-34028 CV...

CVE-2024-38081

creationtimestamp| type| source ---|---|--- 2025-05-03 00:17:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14643 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02...

CVE-2025-35996

creationtimestamp| type| source ---|---|--- 2025-05-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 2025-05-01 20:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo55xlnnhr2t 2025-05-01 22:01:57+00:00| published-proof-of-concept|...

CVE-2025-22882

creationtimestamp| type| source ---|---|--- 2025-04-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-119-02 2025-04-30 08:13:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13987 2025-04-30 10:00:17+00:00| seen|...

CVE-2025-22884

creationtimestamp| type| source ---|---|--- 2025-04-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-119-02 2025-04-30 08:13:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13988 2025-04-30 10:00:18+00:00| seen|...

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added two high-severity security flaws impacting Broadcom Brocade Fabric OS and Commvault Web Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerabilities...

PT-2025-18218 · Undefined · Undefined

🛡️ ALERT: CISA Adds Broadcom & Commvault Vulnerabilities to KEV Database These flaws are actively exploited in the wild. If you're running affected products, patch ASAP. 📌 Broadcom ID: CVE-2023-12345 📌 Commvault ID: CVE-2024-67890 📆 Mitigation deadline: Insert date if known https://t.co/dtEaewjtfL...

Mitsubishi Electric Multiple FA Products (Update D)

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected products. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures...

CVE-2025-3928

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: “Webservers can be compromised through bad actors creating and executing webshells.” Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217...

CVE-2019-6830

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-01...

CVE-2025-46274

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06 2025-04-24 23:09:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13361 2025-04-25 00:19:53+00:00| seen|...