PT-2025-32170 · Ibm · Ibm Tivoli Monitoring

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 20 Description: IBM Tivoli Monitoring is susceptible to a heap-based buffer overflow due to insufficient bounds checking. A remote attacker could exploit this issue to overfl...

GHSA-3C93-92R7-J934 Grafana Infinity Datasource Plugin SSRF Vulnerability

Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...

GPU in the Blind Spot: Overlooked Security Risks in Transportation

Graphics processing units GPUs are becoming an essential part of the intelligent transportation system ITS for enabling video-based and artificial intelligence AI based applications. GPUs provide high-throughput and energy-efficient computing for tasks like sensor fusion and roadside video...

CVE-2025-8286

The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device...

PT-2025-31774 · Undefined · Undefined

hey @Microsoft when Defender started scanning for non-malicious documents like pandemic compliance forms, it crossed from security into behavioral monitoring. Microsoft's transparency failures around this documented in CVE-2020-16883 validated many professionals' concerns...

CVE-2025-8286

CVE-2025-8286 affects Güralp FMUS series seismic monitoring devices. The vulnerability is an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device. Affected products are exposed via a networ...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on July 31, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-212-01 Güralp FMUS Series Seismic Monitoring Devices ICSA-25-212-02 Rockwell Automation...

Alert Fatigue, Data Overload, and the Fall of Traditional SIEMs

Security Operations Centers SOCs are stretched to their limits. Log volumes are surging, threat landscapes are growing more complex, and security teams are chronically understaffed. Analysts face a daily battle with alert noise, fragmented tools, and incomplete data visibility. At the same time,...

Pandora FMS security vulnerabilities

Pandora FMS is a monitoring system from Pandora FMS, USA. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Pandora FMS 5.0RC1 and earlier versions, which stems from the anyterm-module endpoint not cleaning up us...

PT-2025-31582

Name of the Vulnerable Software and Affected Versions: Güralp FMUS series seismic monitoring devices affected versions not specified Description: The Güralp FMUS series seismic monitoring devices expose an unauthenticated Telnet-based command line interface. This could allow an attacker to modify...

AutoGRAPH Web Monitoring Session Duration Unauthorized Access

The vulnerability of the AutoGRAPH Web monitoring software platform lies in the incorrect duration of a session. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted HTTP request...

grafana-pcp security update

An update is available for grafana-pcp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...

CISA Releases Part One of Zero Trust Microsegmentation Guidance

CISA released Microsegmentation in Zero Trust, Part One: Introduction and Planning as part of its ongoing efforts to support Federal Civilian Executive Branch FCEB agencies implementing zero trust architectures ZTAs. This guidance provides a high-level overview of microsegmentation, focusing on i...

XORUX LPAR2RRD security vulnerability

XORUX LPAR2RRD is a server performance monitoring platform from the Czech company XORUX. A security vulnerability exists in XORUX LPAR2RRD that stems from improper privilege management and could lead to process termination...

CVE-2025-24485

creationtimestamp| type| source ---|---|--- 2025-07-28 15:37:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v 2025-07-28 15:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzws43yrx2b...

Linux mgmtremove_adv_monitorcomplete() DoS

The vulnerability of the mgmtremoveadvmonitorcomplete function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

linux-smart-enumeration

First, a couple of useful oneliners ; console wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh console curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700...

WBHT: a Generative Attention Architecture for Detecting Black Hole Anomalies in Backbone Networks

We propose the Wasserstein Black Hole Transformer WBHT framework for detecting black hole BH anomalies in communication networks. These anomalies cause packet loss without failure notifications, disrupting connectivity and leading to financial losses. WBHT combines generative modeling, sequential...

CVE-2025-8134

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-8134 PHPGurukul BP Monitoring Management System bwdates-report-result.php sql injection

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...