CVE-2023-52941 can: isotp: split tx timer into transmission and timeout

In the Linux kernel, the following vulnerability has been resolved: can: isotp: split tx timer into transmission and timeout The timer for the transmission of isotp PDUs formerly had two functions: 1. send two consecutive frames with a given time gap 2. monitor the timeouts for flow control frame...

USN-7379-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on March 27, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-037-01 Schneider Electric EcoStruxure Power Monitoring Expert PME Update A CISA encourages...

CVE-2025-2563

creationtimestamp| type| source ---|---|--- 2025-03-27 04:24:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lldhdf3oje2k 2025-03-29 12:05:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/26740 2025-03-29 16:00:07+00:00| published-proof-of-concept|...

CVE-2025-27404 Icinga Web 2 DOM-based XSS vulnerability

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

CVE-2025-30219

A flaw was found in the RabbitMQ package. Affected versions of RabbitMQ are vulnerable to an attack that can modify the virtual host name on the disk and then make it unrecoverable, with other on disk file modifications. This issue can lead to arbitrary JavaScript code execution in the browsers o...

Security Bulletin: This Power System update is being released to address CVE 2022-34331

Summary A security problem for CVE-2022-34331 was addressed where switches configured to monitor network traffic for malicious activity are not effective because of errant adapter configuration changes. The misconfigured adapter can cause network traffic to flow directly between the VFs and not o...

Atop security vulnerabilities

atop is a tool from the individual developer Gerlof Langeveld for monitoring Linux system resources and processes. A security vulnerability exists in atop version 2.11.0 and earlier, which originates from an unauthorized process that could result in a denial of service or other impact...

HPESBNW04834 rev.1 - HPE Unified OSS Console (UOC) and HPE Unified OSS Assurance Monitoring (UOCAM) Software, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Arbitrary file upload; Remote: Denial of Service DoS, Disclosure of Information, Arbitrary file upload, Unquoted Search Path SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console...

MAL-2025-2621 Malicious code in bsb-backup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 7c8850cc513318b8ede38268eed0fee01ba44c81087cd289294b63bada9f394c This package decodes and executes a script during installation to set up a Telegram bot for device event monitoring. However, the code is...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: kargo, prometheus, secrets-store-csi-driver-provider-azure, aactl, kubernetes-dashboard-auth, tkn, policy-controller, seaweedfs, crossplane, crossplane-provider-azure-storage, boring-registry, bank-vaults, temporal-server, k8sgpt, flux-source-controller, gitea,...

CVE-2024-12580

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...

Citrix DaaS - Error: Monitoring page could not be loaded [User authentication Failure]

New custom cloud administrators get the below error when trying to access Monitor console-...

Personal data revealed in released JFK files

Over 60,000 pages related to the 1963 assassination of US President John F. Kennedy were released as part of President Donald Trump’s directive on March 17, 2025, and while readers will not find a conclusive answer to the main question—nor will the files put an end to surrounding conspiracy...

CVE-2025-25068

creationtimestamp| type| source ---|---|--- 2025-03-21 11:48:02+00:00| seen| https://t.me/cvedetector/20804 2025-03-21 13:23:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp5jqv72l 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2311

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event...

CVE-2025-2311 Authentication Bypass in Sechard Information Technologies' SecHard

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event...

CVE-2025-2311

CVE-2025-2311 affects Sechard Information Technologies’ SecHard prior to 3.3.0.20220411. The root causes cited are Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, and Insufficiently Protected Credentials. Exposed impacts include Authentication Bypass, Interface ...

CVE-2024-8999

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:48+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhwizd52g 2025-03-20 12:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194835864777020...

Why Continuous Compliance Monitoring Is Essential For IT Managed Service Providers

Regulatory compliance is no longer just a concern for large enterprises. Small and mid-sized businesses SMBs are increasingly subject to strict data protection and security regulations, such as HIPAA, PCI-DSS, CMMC, GDPR, and the FTC Safeguards Rule. However, many SMBs struggle to maintain...