RHEL 9 : fence-agents (RHSA-2025:0335)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0335 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

Vulnerability fixed in Microsoft Dynamics Power Automate

Microsoft has fixed a vulnerability in Power Automate for Desktops. A malicious party could exploit the vulnerability to execute arbitrary code in the victim's context, potentially gaining access to sensitive data. Successful exploitation requires the malicious party to trick the victim into...

CVE-2025-21187

Microsoft Power Automate Remote Code Execution Vulnerability...

CVE-2025-21187

Microsoft Power Automate Remote Code Execution Vulnerability...

CVE-2025-21187 Microsoft Power Automate Remote Code Execution Vulnerability

...

CVE-2025-21187

CVE-2025-21187 corresponds to a Microsoft Power Automate Remote Code Execution vulnerability. Connected sources indicate exploitation requires a user to open a rogue file, enabling code execution in the caller’s context. A fix has been released and Microsoft states the vulnerability was addressed...

CVE-2025-21187 Microsoft Power Automate Remote Code Execution Vulnerability

...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking on “AI: Trust & Power” at Capricon 45 in Chicago, Illinois, USA, at 11:30 AM on February 7, 2025. I’m also signing books there on Saturday, February 8, starting at 1:45 PM. I’m speaking at Boskone 62 in Boston,...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security...

Microsoft Power Automate Remote Code Execution Vulnerability

...

PT-2025-1218 · Microsoft · Power Automate

Name of the Vulnerable Software and Affected Versions: Microsoft Power Automate affected versions not specified Description: The issue is related to incorrect code generation management in the Power Automate platform. Exploitation of this issue may allow an attacker to execute arbitrary code...

Microsoft Power Automate 代码注入漏洞

Microsoft Power Automate is a low-code automation platform from Microsoft USA that allows users to create automated workflows that connect and integrate various applications and services. A code injection vulnerability exists in Microsoft Power Automate. An attacker exploiting this vulnerability...

Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)

The version of Microsoft Power Automate for desktop installed on the remote Windows host is If your current version is 2.46.x 2.46.184.25013, 2.47.x 2.47.126.25010, 2.48.x 2.48.164.25010, 2.49.x 2.49.182.25010, 2.50.x 2.50.139.25010, 2.51.x 2.51.349.24355, or 2.52.x 2.52.62.25009. It is, therefor...

RHEL 9 : fence-agents (RHSA-2025:0308)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0308 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: fence-agents: Jinja has a sandbox breakout through indirect reference t...

ALSA-2025:0308 Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: fence-agents: Jinja has a sandbox breakout through indirect reference t...

Siemens SIPROTEC 5 Products

SUMMARY Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for several affected products and...

SUSE CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

DEBIAN-CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...