CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on January 30, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-030-01 Hitachi Energy UNEM ICSA-25-030-02 New Rock Technologies Cloud Connected...

CVE-2025-0741

creationtimestamp| type| source ---|---|--- 2025-01-30 11:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeamhmyh2f 2025-01-30 11:30:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113917075587379126 2025-01-30 13:11:27+00:00| seen|...

CVE-2024-10309

creationtimestamp| type| source ---|---|--- 2025-01-30 06:09:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113915812623981683 2025-01-30 06:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthfi5732n 2025-01-30 07:11:30+00:00| seen|...

CVE-2025-23374

creationtimestamp| type| source ---|---|--- 2025-01-30 04:19:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113915381075401930 2025-01-30 05:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwq4bhl5p2n 2025-01-30 05:30:13+00:00| seen|...

DeepSeek Insecure Code Generation

DeepSeek appears to return horribly insecure code by default. Asking Deepseek on Jan 28 09:33:11 AM UTC 2025: Write a python CGI which takes as an argument string NAME and outputs "Hello"+NAME The Deepseek AI 3 returned: ==== name = form.getvalue'NAME', 'World' Default to 'World' if NAME is not...

PT-2025-5647 · Openmrs · Openmrs Platform +5

Name of the Vulnerable Software and Affected Versions: OpenMRS Platform versions prior to 2.6.11 OpenMRS Platform version 2.5 and earlier, except for version 2.5.14 and later Legacy UI OMOD versions prior to 1.21.0 ID Gen OMOD versions prior to 4.14.0 Address Hierarchy OMOD versions prior to 2.19...

trivy-0.58.2-1.1 on GA media (moderate)

trivy-0.58.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14713-1 Rating: moderate Cross-References: CVE-2024-3817 CVE-2024-45337 CVE-2024-45338 CVE-2025-21613 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-45338 SUSE : 5.9...

GHSA-7HPQ-3G6W-PVHF vulnerabilities

Vulnerabilities for packages: trino, flyway...

USN-7236-2 linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; - VMware vSockets driver; CVE-2024-53164, CVE-2024-53103, CVE-2024-53141...

CVE-2025-24789 vulnerabilities

Vulnerabilities for packages: flyway, trino...

CVE-2024-40890

creationtimestamp| type| source ---|---|--- 2025-01-29 11:50:05+00:00| exploited| https://t.me/truesecator/6669 2025-02-04 09:58:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113945027452629017 2025-02-04 10:15:39+00:00| seen|...

SUSE-SU-2025:0281-1 Security update for go1.22

This update for go1.22 fixes the following issues: - Update to go1.22.11 bsc1218424 - CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc1236045 - CVE-2024-45336: Persist header stripping across repeated redirects bsc1236046...

SUSE-SU-2025:0280-1 Security update for go1.23

This update for go1.23 fixes the following issues: - Update to go1.23.5 bsc1229122 - CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc1236045 - CVE-2024-45336: Persist header stripping across repeated redirects bsc1236046...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.32 security and extras update

Red Hat OpenShift Container Platform release 4.16.32 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...

SUSE SLES15 Security Update : kernel RT (Live Patch 0 for SLE 15 SP6) (SUSE-SU-2025:0268-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0268-1 advisory. This update for the Linux Kernel 6.4.0-1506008 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge:...

corepack22-22.13.0-1.1 on GA media (moderate)

corepack22-22.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14706-1 Rating: moderate Cross-References: CVE-2025-22150 CVE-2025-23083 CVE-2025-23085 CVSS scores: CVE-2025-22150 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2025-22150 SUSE : 7.4...

[SECURITY] [DLA 4032-1] iperf3 security update

Debian LTS Advisory DLA-4032-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 28, 2025 https://wiki.debian.org/LTS Package : iperf3 Version : 3.9-1+deb11u2 CVE ID : CVE-2023-7250 CVE-2024-26306 CVE-2024-53580 Debian Bug : 1071751 1090931 Several security...

Security Bulletin: Multiple vulnerabilities may affect IBM Decision Optimization for Cloud Pak for Data (CVE-2024-42459, CVE-2024-42460 and CVE-2024-42461)

Summary There are multiple vulnerabilities in Node.js Elliptic used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-42461 DESCRIPTION: Node.js Elliptic module coul...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase (CVE-2024-45073, CVE-2024-45086, CVE-2024-45072, CVE-2024-45085)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM DevOps Code ClearCase. Information about security vulnerabilities affecting WAS have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

CVE-2025-0787

creationtimestamp| type| source ---|---|--- 2025-01-28 22:08:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113908260986433585 2025-01-28 22:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6mjuyo2t 2025-01-28 23:17:54+00:00|...