CVE-2025-58400: Unquoted Search Path or Element

RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

hwmon: (corsair-cpro) Validate the size of the received input buffer

...

ICSLure: a Very High Interaction Honeynet for PLC-Based Industrial Control Systems

The security of Industrial Control Systems ICSs is critical to ensuring the safety of industrial processes and personnel. The rapid adoption of Industrial Internet of Things IIoT technologies has expanded system functionality but also increased the attack surface, exposing ICSs to a growing range...

PT-2025-36079

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: An issue exists in Android where an application may be able to monitor motion events due to a confused deputy condition. This could result in local information disclosure without requiring...

Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn

A new specimen of “infostealer” malware offers a disturbing feature: It monitors a target's browser for NSFW content, then takes simultaneous screenshots and webcam photos of the victim...

EcoStruxure Power Monitoring Expert Path Traversal

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction of the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

EcoStruxure Power Monitoring Expert Path Traversal

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

EcoStruxure Power Monitoring Expert Information Disclosure

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the ability to disclose information in the erroneous data range. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2018-18248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline que...

Can Your Security Stack See ChatGPT? Why Network Visibility Matters

Generative AI platforms like ChatGPT, Gemini, Copilot, and Claude are increasingly common in organizations. While these solutions improve efficiency across tasks, they also present new data leak prevention for generative AI challenges. Sensitive information may be shared through chat prompts, fil...

IBM QRadar Suite Security DoS

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to improper validation of certain types of input data. Exploiting these vulnerabilities can allow attackers operating remotely...

Dell PowerScale InsightIQ Uncontrolled Resource Consumption DoS

The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger service interruptions...

CVE-2025-58123

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...

CVE-2025-58123

CVE-2025-58123 affects the Checkmk Exchange plugin BGP Monitoring. The root cause is improper certificate validation, enabling MitM attackers to intercept traffic when positioned on the network. Documented sources confirm the vulnerability description but do not provide explicit affected versions...

CVE-2025-58123 Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...

CVE-2025-58123 Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...

CVE-2025-58123: Improper Certificate Validation

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...

PT-2025-35079

Name of the Vulnerable Software and Affected Versions Checkmk Exchange plugin versions affected versions not specified Description Improper certificate validation in the Checkmk Exchange plugin’s BGP monitoring functionality allows attackers positioned in a man-in-the-middle MitM position to...

Zeek 8.0.1

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

Linux Distros Unpatched Vulnerability : CVE-2021-29469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause...