Mitsubishi Electric MELSEC iQ-F Series

RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service condition for legitimate users for a certain period by repeatedly attempting to log in with incorrect passwords. When the product repeatedly receives unauthorized logins from an attacker, legitimate...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-6554link is external Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors an...

CVE-2022-31804

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-03...

CVE-2022-43110

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05 2025-07-03 09:00:05+00:00| published-proof-of-concept| Telegram/znB4-XOdj2zO7XoRIW291Bfd7B-PZY583Bp9gcjE51XJa2A 2025-08-23 00:33:26+00:00| seen|...

CVE-2022-31803

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-03...

CVE-2022-31802

creationtimestamp| type| source ---|---|--- 2025-07-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-03...

Voltronic Power and PowerShield UPS monitoring software

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an unauthenticated attacker remotely to make configuration changes, resulting in shutting down UPS connected devices or execution of arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures...

CVE-2025-6521

creationtimestamp| type| source ---|---|--- 2025-06-26 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02 2025-06-26 20:04:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lsjwd5nqsj2a 2025-06-27 17:56:11+00:00| seen|...

CVE-2025-3699

creationtimestamp| type| source ---|---|--- 2025-06-26 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-01 2025-06-26 20:02:59+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lsjwa655ru2d 2025-06-26 22:53:24+00:00| seen|...

CVE-2025-6522

creationtimestamp| type| source ---|---|--- 2025-06-26 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02 2025-06-26 20:04:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lsjwd5nqsj2a 2025-06-27 20:44:27+00:00| seen|...

CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, D-Link, Fortinet

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added three security flaws, each impacting AMI MegaRAC, D-Link DIR-859 router, and Fortinet FortiOS, to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of vulnerabilitie...

Mitsubishi Electric Air Conditioning Systems (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to control the air conditioning system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform...

PT-2025-27025 · Undefined · Undefined

A Historic First: BMC Vulnerability CVE-2024-054085 Joins CISA's Most Critical List https://t.co/WMMWeavYPb In June 2025, for the first time, CISA added a Baseboard Management Controller vulnerability to its Known Exploited Vulnerabilities catalog. While BMC vulnerabilities h…...

The Discovery, Disclosure, and Investigation of CVE-2024-25825

CVE-2024-25825 is a vulnerability found in FydeOS. This thesis describes its discovery, disclosure, and its further investigation in connection to a nation state actor. The vulnerability is CWE-1392: Use of Default Credentials, CWE-1393: Use of Default Password, and CWE-258: Empty Password in...

CVE-2025-39205

creationtimestamp| type| source ---|---|--- 2025-06-24 14:46:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19354 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02 2025-10-16 10:00:00+00:00| seen|...

CVE-2025-39202

creationtimestamp| type| source ---|---|--- 2025-06-24 13:50:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19338 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02...

CVE-2025-39204

creationtimestamp| type| source ---|---|--- 2025-06-24 13:02:06+00:00| seen| Telegram/b5DYkbguYKKC6SWHwVUadkrQ9RB3hxTshwlycvFN8u4r2U4 2025-06-24 14:46:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19355 2025-07-03 10:00:00+00:00| seen|...

CVE-2025-39203

creationtimestamp| type| source ---|---|--- 2025-06-24 13:02:06+00:00| seen| Telegram/b5DYkbguYKKC6SWHwVUadkrQ9RB3hxTshwlycvFN8u4r2U4 2025-06-24 14:46:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19356 2025-07-03 10:00:00+00:00| seen|...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on June 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-175-01 Kaleris Navis N4 Terminal Operating System ICSA-25-175-02 Delta Electronics...

CVE-2025-1718

creationtimestamp| type| source ---|---|--- 2025-06-24 11:50:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19327 2025-06-24 13:07:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/41716 2025-06-24 19:00:05+00:00| published-proof-of-concept|...