CVE-2025-7766

creationtimestamp| type| source ---|---|--- 2025-07-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-02 2025-07-23 00:41:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulrwpbh4e2o 2025-07-24 03:00:16+00:00| published-proof-of-concept|...

CVE-2025-30032

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-390/...

CVE-2025-29999

creationtimestamp| type| source ---|---|--- 2025-04-08 13:59:50+00:00| seen| https://t.me/cvedetector/22442 2025-04-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-01...

CVE-2023-4623

creationtimestamp| type| source ---|---|--- 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09 2025-02-14 10:08:16+00:00| seen| Telegram/B3k3wgjVZS1x3mbQLW2Wp7ATd7Kfy0awTfXoc73gm-NNpX-...

CVE-2024-41717

creationtimestamp| type| source ---|---|--- 2024-10-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-05 2024-10-23 00:40:04+00:00| seen| https://t.me/cvedetector/8665...

Siemens RUGGEDCOM and SCALANCE M-800/S615 Family

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

icsti.su Cross Site Scripting vulnerability OBB-3275981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3524

creationtimestamp| type| source ---|---|--- 2022-10-16 14:30:42+00:00| seen| https://t.me/cibsecurity/51529 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09...

Ethical dilemmas with responsible disclosure

We do a LOT of disclosures, probably starting one a day on average. Between us, we spend a man day or so per week just managing disclosures. It creates pain for us and consumes time, particularly when the vendor won’t listen. We get the occasional legal threat, which takes time and money to slap...

Telerik Analytics Monitor Library allows DLL hijacking

Overview Telerik Analytics Monitor Library is a third-party application analytics service that collects detailed application metrics for vendors. Some versions of the Telerik library allow DLL hijacking, allowing an attacker to load malicious code in the context of the Telerik-based application...