PT-2025-88: Cross‑site scripting and open redirect in Fastwel PLC web interface

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability stems from the lack of user input filtering in the redirect parameter. Exploitation of the vulnerability allows a remote attacker to execute arbitrary...

PT-2025-86: Disclosure of confidential data via controller configuration request in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to obtain administrator‑level privileges. Vulnerability status: Confirmed by vendor Date of vulnerability remediation:...

CVE-2025-10233: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2025-29592

The OA office automation system oasys v1.1 is vulnerable to a Directory Traversal flaw in the ProcedureController component. This vulnerability, classified as CWE-22 , allows an attacker to perform unauthorized access to files and directories on the system. The CVSS 3.1 score is 5.6 (MEDIUM) , wi...

Linux Distros Unpatched Vulnerability : CVE-2013-6647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. CVE-2013-6647 Note that Nessus relies on the presence of the package as reported b...

PT-2025-85: Insufficient access control in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with an unprivileged account to gain the access to protected information. Vulnerability status: Confirmed by vendor Date of...

CVE-2025-29592

oasys v1.1 is vulnerable to Directory Traversal in ProcedureController...

PT-2025-84: Insecure firmware update mechanism in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows a remote attacke with administrative permissions in the execution environment to upload a modified update archive and execute arbitrary cod...

CVE-2025-29592

oasys v1.1 is vulnerable to Directory Traversal in ProcedureController...

SUSE CVE-2025-39722

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP Since the CAAM on these SoCs is managed by another ARM core, called the SECO Security Controller on iMX8QM and Secure Enclave on iMX8ULP, which also reserves access to...

CVE-2025-9166

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller...

CVE-2025-9166

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller...

CVE-2025-9160

A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution...

CVE-2025-9166 Rockwell Automation ControlLogix® 5580 V35.013 Denial-Of-Service

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller...

Rockwell Automation ControlLogix 5580

RISK EVALUATION Successful exploitation of this vulnerability could result in a major nonrecoverable fault on the controller. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...

CVE-2025-10122

A vulnerability was found in Maccms10 2025.1000.4050. Affected is the function rep of the file application/admin/controller/Database.php. Performing manipulation of the argument where results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be use...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Integrated Management Controller IMC is a set of software used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down and restarting the server. A cross-site scripting vulnerability exists in Cisco...

PT-2025-36727

Name of the Vulnerable Software and Affected Versions: versions affected versions not specified Description: A denial-of-service issue exists due to the controller repeatedly attempting to forward messages. This can result in a major, nonrecoverable fault on the controller. Recommendations: At th...

Rockwell Automation’s various products have security vulnerabilities

Rockwell Automation 1756-EN4 and others are products of Rockwell Automation, Inc.Rockwell Automation 1756-EN4 is a controller.Rockwell Automation 1756-ENT2R is an Ethernet communication The Rockwell Automation 1756-ENT4R is an Ethernet communication module. A security vulnerability exists in...

Cisco Integrated Management Controller Input Validation Error Vulnerability

Cisco Integrated Management Controller IMC is a set of software used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down and restarting the server. An input validation error vulnerability exists in Cisco...