AVEVA Process Optimization Code Injection Vulnerability

AVEVA Process Optimization is a real-time process optimization software developed by the British company AVEVA. AVEVA Process Optimization has a code injection vulnerability. This vulnerability arises because authenticated attackers could potentially alter TCL macro scripts, leading to privilege...

PT-2026-3199

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

AVEVA Process Optimization Authentication Bypass Privilege Escalation

The vulnerability of software for online simulation and optimization of AVEVA Process Optimization processes is related to the lack of authentication. Exploiting this vulnerability allows a perpetrator to execute arbitrary code, gain read, modify, and delete file privileges, thereby enhancing the...

AVEVA Process Optimization Uncontrolled Element Code Execution

The vulnerability of software for online simulation and optimization of AVEVA Process Optimization processes is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, and gain full control...

AVEVA Process Optimization Code Execution Full Control

The vulnerability of software for online simulation and optimization of AVEVA Process Optimization processes is related to improper code generation management. Exploiting this vulnerability allows attackers to execute arbitrary code, enhance their privileges, and gain full control over the system...

TAO software Code Execution

The vulnerability of the TAO software service for online modeling and process optimization in AVEVA Process Optimization is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain full control over the system...

online simulation and optimization Privilege Escalation

The vulnerability of software for online simulation and optimization of AVEVA Process Optimization processes is related to the use of potentially dangerous functions. Exploiting this vulnerability can allow attackers to enhance their privileges...

AVEVA Process Optimization SQL Injection Privilege Escalation

The vulnerability of software for online modeling and optimization of AVEVA Process Optimization processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows attackers to execute arbitrary code, increase their privileges, and gain ful...

CVE-2025-64769: Cleartext Transmission of Sensitive Information

The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted and could become subject to hijacking or data leakage in certain man-in-the-middle or passive inspection scenarios...

Online Simulation Process Optimization Man-in-the-Middle

The vulnerability of software for online simulation and optimization of AVEVA Process Optimization processes lies in the transmission of critical information in open text. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” type attack...

AVEVA Process Optimization security vulnerabilities

AVEVA Process Optimization is a real-time process optimization software developed by the British company AVEVA. AVEVA Process Optimization has a security vulnerability that stems from the use of unencrypted connection channels or protocols by default. This can lead to man-in-the-middle attacks or...

RustCrypto Utilities cmov: `thumbv6m-none-eabi` compiler emits non-constant time assembly when using `cmovnz`

Summary thumbv6m-none-eabi Cortex M0, M0+ and M1 compiler emits non-constant time assembly when using cmovnz portable version. I did not found any other target with the same behaviour but I did not go through all targets supported by Rust. Details It seems that, during mask computation, an LLVM...

GHSA-2GQC-6J2Q-83QP RustCrypto Utilities cmov: `thumbv6m-none-eabi` compiler emits non-constant time assembly when using `cmovnz`

Summary thumbv6m-none-eabi Cortex M0, M0+ and M1 compiler emits non-constant time assembly when using cmovnz portable version. I did not found any other target with the same behaviour but I did not go through all targets supported by Rust. Details It seems that, during mask computation, an LLVM...

EUVD-2023-35131

Improper buffer restrictions in IntelR Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Exploit for CVE-2025-67303

ComfyUI Custom Node - AI Enhancement This is a custom node fo...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: s390: Disabling ARCHWANTOPTIMIZEHUGETLBVMEMMAP According to Luiz Capitulino, enabling HVO on s390 leads to reproducible crashes. The issue arises because the kernel’s page tables are modified without flushing the corresponding TL...

PT-2026-3196

Name of the Vulnerable Software and Affected Versions Process Optimization affected versions not specified Description An authenticated attacker with standard user privileges can modify Process Optimization project files, insert code, and potentially gain the privileges of a user who interacts wi...

PT-2026-3197

Name of the Vulnerable Software and Affected Versions Process Optimization application suite affected versions not specified Description The Process Optimization application suite uses connection channels and protocols that are not encrypted by default. This could allow for data hijacking or...

MiracleLinux 8 : firefox-128.10.1-1.el8_10.ML.1 (AXSA:2025-9963:16)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9963:16 advisory. firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919...

SecureCAI: Injection-Resilient LLM Assistants for Cybersecurity Operations

Large Language Models have emerged as transformative tools for Security Operations Centers, enabling automated log analysis, phishing triage, and malware explanation; however, deployment in adversarial cybersecurity environments exposes critical vulnerabilities to prompt injection attacks where...