PT-2025-47784

Name of the Vulnerable Software and Affected Versions Terraform Enterprise versions prior to 1.0.3 and prior to 1.1.1 Description A user with limited permissions within a Terraform Enterprise workspace can create Terraform state versions. This could lead to infrastructure changes if a subsequent...

HashiCorp Terraform Enterprise 安全漏洞

HashiCorp Terraform Enterprise is a development tool from HashiCorp USA. A security vulnerability exists in HashiCorp Terraform Enterprise that stems from insufficient privileges and could result in infrastructure changes...

CISA: Suspicious Unmanned Aircraft System Activity Guidance

Suspicious Unmanned Aircraft System Activity Guidance for Critical Infrastructure Owners and Operators is intended for critical infrastructure stakeholders who are concerned with unmanned aircraft system UAS activity near or around their facilities...

The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The State of Security Today: Setting the Stage for 2026

As we close out 2025, one thing is clear: the security landscape is evolving faster than most organizations can keep up. From surging ransomware campaigns and AI-enhanced phishing to data extortion, geopolitical fallout, and gaps in cyber readiness, the challenges facing security teams today are ...

Desktop Alert PingAlert Server-Side Request Forgery Vulnerability

Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. Desktop Alert PingAlert suffers from a server-side request forgery vulnerability, which stems from the server not...

The vulnerability of the Business Process Intelligence (BPI) module of the Nagios XI IT infrastructure monitoring tool allows a attacker to execute arbitrary code.

The vulnerability of the Business Process Intelligence BPI module of the Nagios XI IT infrastructure monitoring tool is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20251117-04

A vulnerability in the LXD container and lightweight virtual machine management system is related to redundant API data output. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to potentially sensitive information The vulnerability in the LXD container and...

ROS-20251117-05

A vulnerability in the LXD container and lightweight virtual machine management system is related to redundant API data output. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to potentially sensitive information The vulnerability in the LXD container and...

The vulnerability of the a3xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a3xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver for direct rendering infrastructure support in Linux kernels.

The vulnerability of the a3xxgpuinit function in the drivers/gpu/drm/msm/adreno/a3xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the absence of a standardized error-handling mechanism. Exploiting this vulnerability could allow an attacker...

Siemens’ software-hardware infrastructure vulnerabilities, related to insecure management of privileges, allow attackers to escalate their privileges.

The vulnerability of Siemens’ software and hardware infrastructure is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the WinRM configuration master of the Nagios XI IT infrastructure monitoring tool allows a attacker to execute arbitrary commands.

The vulnerability of the WinRM configuration master of the Nagios XI IT infrastructure monitoring tool is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the a4xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a4xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver to attacks related to Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the a4xxgpuinit function in the drivers/gpu/drm/msm/adreno/a4xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a servic...

The vulnerability of the msm_edp_ctrl_power() function in the drivers/gpu/drm/msm/edp/edp_ctrl.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the msmedpctrlpower function in the drivers/gpu/drm/msm/edp/edpctrl.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 41 Update: opentofu-1.10.7-1.fc41

OpenTofu lets you declaratively manage your cloud infrastructure...

[SECURITY] Fedora 42 Update: opentofu-1.10.7-1.fc42

OpenTofu lets you declaratively manage your cloud infrastructure...

[SECURITY] Fedora 43 Update: opentofu-1.10.7-1.fc43

OpenTofu lets you declaratively manage your cloud infrastructure...

CVE-2025-54560

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure...

CVE-2025-54560

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21395 more potentially affected by CVE-2025-64718 via js-yaml (>=3.0.0, <=3.14.1)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: OSV:GHSA-MH29-5H37-FV8M...