Missing Use of the Secure Flag in Zynq™ UltraScale+™ SoC Trusted Firmware

Summary A researcher reported that the security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability turn on and off subsystems within the SoC...

Empower and Accelerate Your SOC with the Wiz SecOps AI Agent

Meet the SecOps AI Agent: AI-powered threat triage built on the Wiz platform. Investigate every threat with speed and transparency...

The vulnerability of the ParseAddress() function in the Go programming language allows a perpetrator to trigger a service failure.

The vulnerability of the ParseAddress function in the Go programming language is related to an uncontrolled resource consumption due to incorrect connection operations with strings. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

AZL-69961 CVE-2025-64434 affecting package kubevirt for versions less than 0.59.0-33

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler via verifyPeerCert, an attacker who compromises a virt-handler instance, could exploit these shared credentials to impersonate virt-api and execute privileg...

CVE-2025-64434 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler via verifyPeerCert, an attacker who compromises a virt-handler instance, could exploit these shared credentials to impersonate virt-api and execute privileg...

CVE-2025-64434 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler via verifyPeerCert, an attacker who compromises a virt-handler instance, could exploit these shared credentials to impersonate virt-api and execute privileg...

CVE-2025-7719

GE Vernova Smallworld (SWMFS) CVE-2025-7719 describes an improper limitation of a pathname to a restricted directory (path traversal) that could allow file manipulation. Affected versions are Smallworld 5.3.5 and earlier. Reported impact is file operations that could be manipulated locally on Win...

CVE-2025-7719 Smallworld SWMFS Arbitrary File Ops

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions...

Malicious Package

Overview MyDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Kubevirt 授权问题漏洞

Kubevirt is an open source virtual machine manager from KubeVirt. An authorization issue vulnerability exists in Kubevirt versions prior to 1.5.3 and prior to 1.6.1, which stems from a flaw in the peer validation logic in virt-handler, which could allow an attacker to impersonate the virt-api and...

GO-2025-3999 Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd

Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd...

Why SOC Burnout Can Be Avoided: Practical Steps

Behind every alert is an analyst; tired eyes scanning dashboards, long nights spent on false positives, and the constant fear of missing something big. It's no surprise that many SOCs face burnout before they face their next breach. But this doesn't have to be the norm. The path out isn't through...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990233 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix UaF in netns ops registration error path If netassigngeneric fails, the current error pa...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989155 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989237 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops ...

HCL DevOps Loop 安全漏洞

HCL DevOps Loop is a suite of code development platforms from HCL India. A security vulnerability exists in HCL DevOps Loop that stems from the API authentication middleware not properly validating token expiration times and cryptographic signatures, which could lead to the use of expired or...

WordPress Depicter plugin cross-site request forgery vulnerability

WordPress Depicter plugin is a slider, popup and rotator image creation tool designed for WordPress, offering a no-code interface and rich customization features. The WordPress Depicter plugin suffers from a cross-site request forgery vulnerability, which originates from a web application that do...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988763 advisory. In the Linux kernel, the following vulnerability has been resolved: tpm: use trygetops in tpm-space.c As part of the series conversion to remove nested TPM operation...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990227 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during system suspend Commit 4ce6e2db00de virtio-blk: Ensure ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989505 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattrset|get and listxattr operations UBIFS may occur some problems with...