MAL-2025-17331 Malicious code in com.microsoft.mixedreality.powerthermalnotification (npm)

The package com.microsoft.mixedreality.powerthermalnotification was found to contain malicious code...

MAL-2025-29491 Malicious code in poltergeist-ha-pc-power (npm)

The package poltergeist-ha-pc-power was found to contain malicious code...

MAL-2025-37183 Malicious code in trello-power-up-tutorial-part-one (npm)

The package trello-power-up-tutorial-part-one was found to contain malicious code...

Malicious code in powerbi-client-beta (npm)

The package powerbi-client-beta was found to contain malicious code...

Malicious code in trello-power-up-tutorial-part-one (npm)

The package trello-power-up-tutorial-part-one was found to contain malicious code...

CVE-2025-9041

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

CVE-2025-9042 Rockwell Automation FLEX 5000 I/O - Module Fault

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

CVE-2025-9042 Rockwell Automation FLEX 5000 I/O - Module Fault

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

CVE-2025-9041 Rockwell Automation FLEX 5000 I/O - Module Fault

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

CVE-2025-9041 Rockwell Automation FLEX 5000 I/O - Module Fault

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

CVE-2025-9041

CVE-2025-9041 affects Rockwell Automation FLEX 5000 I/O, specifically the 5094-IF8 device. The issue arises from improper handling of CIP Class 32 requests when a module is inhibited, causing the module to enter a fault state with the Module LED flashing red. After un-inhibiting, it reports a con...

CVE-2025-40752

A vulnerability has been identified in POWER METER SICAM Q100 7KG9501-0AA01-0AA1 All versions = V2.60 = V2.60 = V2.60 = V2.60 = V2.70 V2.80. Affected devices store the password for the SMTP account as plain text. This could allow an authenticated local attacker to extract it and use the configure...

PT-2025-33294 · 5094-Iy8 · 5094-Iy8

Name of the Vulnerable Software and Affected Versions: 5094-IY8 device affected versions not specified Description: A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited. This causes the module to enter a fault state, indicated by a flashing red...

PT-2025-33285 · 5094-If8 · 5094-If8

Name of the Vulnerable Software and Affected Versions: 5094-IF8 device affected versions not specified Description: A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited. This causes the module to enter a fault state, indicated by a flashing red...

CVE-2025-9042: Improper Validation of Specified Type of Input

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

Power Management DoS

The vulnerability of the power management function in macOS operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

EcoStruxure Power Monitoring Expert Deserialization

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Malvertising campaign leads to PS1Bot, a multi-stage malware framework

Cisco Talos has observed an ongoing malware campaign that seeks to infect victims with a multi-stage malware framework, implemented in PowerShell and C, which we are referring to as "PS1Bot." PS1Bot features a modular design, with several modules delivered used to perform a variety of malicious...

CVE-2025-40752

A vulnerability has been identified in POWER METER SICAM Q100 7KG9501-0AA01-0AA1 All versions = V2.60 = V2.60 = V2.60 = V2.60 = V2.70 V2.80. Affected devices store the password for the SMTP account as plain text. This could allow an authenticated local attacker to extract it and use the configure...

CVE-2025-40752

A vulnerability has been identified in POWER METER SICAM Q100 7KG9501-0AA01-0AA1 All versions = V2.60 = V2.60 = V2.60 = V2.60 = V2.70 V2.80. Affected devices store the password for the SMTP account as plain text. This could allow an authenticated local attacker to extract it and use the configure...