CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-329-01 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share ICSA-25-329-02 Rockwell Automation Aren...

CVE-2025-11918

The CVE-2025-11918 entry describes a stack-based buffer overflow in Rockwell Automation Arena® related to parsing DOE files. The vulnerability is local-only: a local attacker can trigger arbitrary code execution by opening a malicious DOE file on affected Arena installations. The connected source...

EUVD-2019-4976

Malware in sbrugna...

EUVD-2019-4974

Malware in sbrugna...

EUVD-2019-4966

Malware in sbrugna...

EUVD-2019-4982

Malware in sbrugna...

EUVD-2018-20451

Malware in sbrugna...

EUVD-2019-4965

Malware in sbrugna...

EUVD-2025-23623

Malicious code in bioql PyPI...

EUVD-2023-33029

Malicious code in bioql PyPI...

EUVD-2023-33030

Malicious code in bioql PyPI...

EUVD-2025-20873

Malicious code in bioql PyPI...

EUVD-2023-33031

Malicious code in bioql PyPI...

EUVD-2025-23624

Malicious code in bioql PyPI...

EUVD-2025-23625

Malicious code in bioql PyPI...

EUVD-2023-31589

Malicious code in bioql PyPI...

EUVD-2024-27871

Malicious code in bioql PyPI...

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2025-7033

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose...