The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection, specifically the MC Works64 package, arises from errors in processing .LNK files. This vulnerability allows a intruder to write arbitrary files and trigger service failures.

The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection via the MC Works64 interface is related to errors in processing files with the .LNK extension. Exploiting this vulnerability allows an intruder to write arbitrary files and cause service failure...

Linux Distros Unpatched Vulnerability : CVE-2023-53037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails...

CVE-2025-54621

Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures...

The vulnerability of the distribution and transaction optimization software in the Apache Seata microservice architecture, related to shortcomings in the deserialization mechanism, allows attackers to trigger service failures.

The vulnerability of distribution software and the improvement of transaction performance in the architecture of Apache Seata microservices is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to trigger service failures through a...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in its unlimited resource distribution, which allows a hacker to cause a service failure.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to cause system failures.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures...

The vulnerability in the WasmToJSException script of the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS allows attackers to execute arbitrary code and trigger a service failure.

The vulnerability of the WasmToJSException script in Safari browsers on macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures within the browser context...

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to cause system failures.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures...

The vulnerability of Apache CXF web services, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Apache CXF web services is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of embedded software developed by Qualcomm, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of embedded software developed for Qualcomm chips relates to the manipulation of the zero pointer. Exploiting this vulnerability can allow attackers to cause system failures...

The Semiconductor Industry and Regulatory Compliance

Earlier this week, the Trump administration narrowed export controls on advanced semiconductors ahead of US-China trade negotiations. The administration is increasingly relying on export licenses to allow American semiconductor firms to sell their products to Chinese customers, while keeping the...

CVE-2025-54621

Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures...

CVE-2025-54621

Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures...

CVE-2025-54621

Huawei HarmonyOS exposed vulnerability in the WantAgent module (iterator failure) that may cause memory release failures. Affected component: WantAgent in HarmonyOS; root cause described as an iterator failure within the module. Documented impact: possible memory release failure if exploited. Exp...

PT-2025-32026 · Iterator · Iterator

Name of the Vulnerable Software and Affected Versions: Iterator affected versions not specified Description: An iterator failure issue exists in the multi-mode input module. Successful exploitation may cause iterator failures and affect availability. Recommendations: At the moment, there is no...

PT-2025-32028 · Wantagent · Wantagent

Name of the Vulnerable Software and Affected Versions: WantAgent affected versions not specified Description: An iterator failure issue exists within the WantAgent module, potentially leading to memory release failures upon successful exploitation. Recommendations: At the moment, there is no...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility lies in insufficient validation of input data, allowing a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to cause service interruptions...

PT-2025-31774 · Undefined · Undefined

hey @Microsoft when Defender started scanning for non-malicious documents like pandemic compliance forms, it crossed from security into behavioral monitoring. Microsoft's transparency failures around this documented in CVE-2020-16883 validated many professionals' concerns...

WordPress Auteur Framework plugin <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Settings Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Updates vulnerability discovered by Lucio Sá in WordPress Plugin Auteur Framework versions = 7.1...