Advancing Autonomous Incident Response: Leveraging LLMs and Cyber Threat Intelligence

Effective incident response IR is critical for mitigating cyber threats, yet security teams are overwhelmed by alert fatigue, high false-positive rates, and the vast volume of unstructured Cyber Threat Intelligence CTI documents. While CTI holds immense potential for enriching security operations...

PT-2025-32982 · Zkteco · Zkteco Wl20

Name of the Vulnerable Software and Affected Versions: ZKTeco WL20 affected versions not specified Description: The device stores Wi-Fi credentials, configuration data, and system data in plaintext within the device firmware. An attacker with physical access can extract the firmware and reverse...

CVE-2025-24923

Uncontrolled search path in some IntelR AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24923

Uncontrolled search path in some IntelR AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24923

Uncontrolled search path in some IntelR AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24923

The CVE is linked to Intel(R) AI for Enterprise Retrieval-augmented Generation. Affected product: Intel AI for Enterprise Retrieval-augmented Generation prior to version 1.1.0. Vulnerability: Uncontrolled search path that may allow an authenticated user with local access to escalate privileges. I...

CVE-2025-47444

Insertion of Sensitive Information Into Sent Data vulnerability in Liquid Web GiveWP allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a before 4.6.1...

Intel AI for Enterprise Retrieval-augmented Generation 代码问题漏洞

Intel AI for Enterprise Retrieval-augmented Generation is a technology framework for enhancing the accuracy and relevance of Large Language Model LLM responses by incorporating an external knowledge base. An uncontrolled search path vulnerability exists in Intel AI for Enterprise...

Intel® AI for Enterprise Retrieval-augmented Generation Software Advisory

Summary: A potential security vulnerability in some Intel® AI for Enterprise Retrieval-augmented Generation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24923 Description:...

PT-2025-32738 · Intel · Intel(R) Ai For Enterprise Retrieval-Augmented Generation

Name of the Vulnerable Software and Affected Versions: IntelR AI for Enterprise Retrieval-augmented Generation affected versions not specified Description: An uncontrolled search path exists in some IntelR AI for Enterprise Retrieval-augmented Generation software. This may allow an authenticated...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 – Apache Tomcat RCE Exploit Descrição ---------...

Linux Distros Unpatched Vulnerability : CVE-2025-38254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add sanity checks for drmedidraw When EDID is retrieved via drmedidraw, it...

Incident Response Planning Using a Lightweight Large Language Model with Reduced Hallucination

Timely and effective incident response is key to managing the growing frequency of cyberattacks. However, identifying the right response actions for complex systems is a major technical challenge. A promising approach to mitigate this challenge is to use the security knowledge embedded in large...

CVE-2025-6632

A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-53544

CVE-2025-53544 concerns Trilium Notes prior to 0.97.0, where a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login password without triggering rate limiting. The app is described as a single-user, username-less system, with...

Trilium Notes 安全漏洞

Trilium Notes is a layered notes application by Zadam Personal Developer. It specializes in building large personal knowledge bases. A security vulnerability exists in Trilium Notes versions prior to 0.97.0, which stems from a brute force protection bypass in the initial synchronization seed...

SUSE CVE-2025-3228

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly retrieve requestorInfo from playbooks handler for guest users which allows an attacker access to the playbook run...

ASINT: Learning AS-To-Organization Mapping from Internet Metadata

Accurately mapping Autonomous Systems ASNs to their owning or operating organizations underpins Internet measurement research and security applications. Yet existing approaches commonly rely solely on WHOIS or PeeringDB, missing important relationships e.g., cross-regional aliases, parent-child...

CVE-2025-41373 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-50870

Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint. The myds GET parameter accepts an email address as input and directly returns the corresponding student's personal information without validating the identity or permissions of the...