Schneider Electric EcoStruxure Power Monitoring Expert和EcoStruxure Power Operation AdvancedReporting and Dashboards Module 路径遍历漏洞

Schneider Electric EcoStruxure Power Monitoring Expert and EcoStruxure Power Operation AdvancedReporting and Dashboards Module are products of Schneider Electric, France. Schneider Electric EcoStruxure Power Monitoring Expert is a device for power distribution monitoring in IoT environments...

Schneider Electric EcoStruxure Power Monitoring Expert和Schneider Electric EcoStruxure Power Operation 路径遍历漏洞

Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric EcoStruxure Power Operation Schneider Electric EPO are both products of the French company Schneider Electric Schneider Electric EcoStruxure Power Monitoring Expert is an appliance for power distribution monitoring in I...

PT-2025-46597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Model Specific Registers MSRs access during performance monitoring. Specifically, an incorrect check in the intel pmu acr late setup helper...

nginx-defender 安全漏洞

nginx-defender is a lightweight real-time log monitoring tool from the individual developer Anish Paleja. A security vulnerability exists in nginx-defender, which stems from the fact that default credentials may lead to bypassing security protections...

CVE-2025-55300 Komari Allows Cross-site WebSocket Hijacking

Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance. Prior to 1.0.4-fix1, WebSocket upgrader has disabled origin checking, enabling Cross-Site WebSocket Hijacking CSWSH attacks against authenticated user...

CVE-2025-9099

The CVE-2025-9099 entry concerns Acrel Environmental Monitoring Cloud Platform up to 20250804. The vulnerability resides in the NewsManage/UploadNewsImg interface, where manipulating the File parameter enables unrestricted file uploads and remote exploitation. Public disclosure of the exploit is ...

CVE-2025-9099: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in Acrel Environmental Monitoring Cloud Platform up to 20250804. This affects an unknown part of the file /NewsManage/UploadNewsImg. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...

Acrel Environmental Monitoring Cloud Platform 代码问题漏洞

Acrel Environmental Monitoring Cloud Platform is an IoT data center from Acrel, China. Acrel Environmental Monitoring Cloud Platform 20250804 and prior versions suffer from a code issue vulnerability that stems from the lack of restrictions on file uploads in the NewsManage/UploadNewsImg interfac...

Linux Distros Unpatched Vulnerability : CVE-2021-37698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In...

ChamaleoNet: Programmable Passive Probe for Enhanced Visibility on Erroneous Traffic

Traffic visibility remains a key component for management and security operations. Observing unsolicited and erroneous traffic, such as unanswered traffic or errors, is fundamental to detect misconfiguration, temporary failures or attacks. ChamaleoNet transforms any production network into a...

SUSE CVE-2025-38548

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Validate the size of the received input buffer Add bufferrecvsize to store the size of the received bytes. Validate bufferrecvsize in sendusbcmd...

CVE-2025-38548

CVE-2025-38548 affects the Linux kernel hwmon driver for Corsair Corsair-CPro. The root cause is improper validation of the input buffer size received by the USB command path, allowing potential mismatches between the reported and actual buffer lengths. The fix, as documented in the connected Ast...

Linux Distros Unpatched Vulnerability : CVE-2021-46927

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nitroenclaves: Use getuserpagesunlocked call to handle mmap assert After commit 5b78ed24e8e...

Malicious code in cordova-plugin-wifi-monitoring (npm)

The package cordova-plugin-wifi-monitoring was found to contain malicious code...

MAL-2025-17571 Malicious code in cordova-plugin-wifi-monitoring (npm)

The package cordova-plugin-wifi-monitoring was found to contain malicious code...

Unleashing Agentic AI for Superior Threat-Informed Risk Prioritization with Agent Nyra

The cybersecurity landscape evolves relentlessly, with new adversaries and threats emerging daily. For organizations navigating these challenges, reactive responses are no longer enough. It’s about moving from complex, disconnected data streams to proactive, autonomous solutions with actionable...

Aide 安全漏洞

Aide is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. A security vulnerability exists in versions prior to Aide 0.19.2, which stems from improper output neutralization and could lead to bypassing detection...

Extending the OWASP Multi-Agentic System Threat Modeling Guide: Insights from Multi-Agent Security Research

We propose an extension to the OWASP Multi-Agentic System MAS Threat Modeling Guide, translating recent anticipatory research in multi-agent security MASEC into practical guidance for addressing challenges unique to large language model LLM-driven multi-agent architectures. Although OWASP's...

PT-2025-33108

Name of the Vulnerable Software and Affected Versions: Centreon web versions 23.10.0 through 23.10.26 Centreon web versions 24.04.0 through 24.04.16 Centreon web versions 24.10.0 through 24.10.9 Description: The web application is susceptible to SQL Injection due to improper neutralization of...

IBM Tivoli Monitoring Buffer Overflow

The vulnerability of the IBM Tivoli Monitoring information infrastructure lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause server failures...