PT-2025-32713

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR Standard Manageability affected versions not specified Description: An out-of-bounds read issue exists in the firmware for some IntelR AMT and IntelR Standard Manageability. A privileged user may be able to enable...

2025.3 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services Intel® SPS, Intel® Active Management Technology AMT, and Intel® Standard Manageability may allow information disclosure or escalation of privilege. Intel is...

CVE-2025-20099: Improper Access Control

Improper access control for some IntelR Rapid Storage Technology installation software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20090: Untrusted Pointer Dereference

Untrusted Pointer Dereference for some IntelR QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access...

Intel 800 Series Ethernet 代码问题漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. An elevation of privilege vulnerability exists in Intel 800 Series Ethernet that stems from an unchecked exception condition, whi...

Linux Distros Unpatched Vulnerability : CVE-2022-48776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doesn't free pparts when ...

Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target OT Firewalls

Malicious actors have been observed exploiting a now-patched critical security flaw impacting Erlang/Open Telecom Platform OTP SSH as early as beginning of May 2025, with about 70% of detections originating from firewalls protecting operational technology OT networks. The vulnerability in questio...

Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target OT Firewalls

Malicious actors have been observed exploiting a now-patched critical security flaw impacting Erlang/Open Telecom Platform OTP SSH as early as beginning of May 2025, with about 70% of detections originating from firewalls protecting operational technology OT networks. The vulnerability in questio...

CVE-2025-8853

CVE-2025-8853 concerns the Official Document Management System by 2100 Technology, which has an authentication bypass vulnerability. An unauthenticated remote attacker can obtain a user’s connection token and use it to log in as that user, enabling full access. CVSS metrics indicate CRITICAL impa...

CVE-2025-8393 Dreame Technology iOS and Android Mobile Applications Improper Certificate Validation

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...

Burk Technology ARC Solo 访问控制错误漏洞

Burk Technology ARC Solo is an IP-based remote monitoring and control system from Burk USA. An access control error vulnerability exists in Burk Technology ARC Solo that stems from a password change mechanism that does not properly validate authentication, potentially leading to device takeover...

CVE-2025-5095: Missing Authentication for Critical Function

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...

From Cloud to Hybrid: 360° Runtime Protection, Anywhere You Run

Wiz Sensor Workload Scanner brings runtime visibility and context to hybrid environments—cloud, on-prem, and edge—all in a single platform...

CISA Releases Ten Industrial Control Systems Advisories

CISA released ten Industrial Control Systems ICS advisories on August 7, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-219-01 Delta Electronics DIAView ICSA-25-219-02 Johnson Controls FX80 and FX90...

mtd: nand: ecc-mxic: Fix use of uninitialized variable ret

...

Burk Technology ARC Solo

RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker gaining access to the device, locking out authorized users, or disrupting operations. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

PT-2025-32330 · Burk Technology · Arc Solo

Name of the Vulnerable Software and Affected Versions: Burk Technology ARC Solo affected versions not specified Description: The password change mechanism in Burk Technology ARC Solo does not require proper authentication, potentially allowing an attacker to take over the device. A password chang...

PT-2025-34874

Name of the Vulnerable Software and Affected Versions: GLPI versions 10.0.0 through 10.0.18 Description: GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. A connected user without administration rights can...

Linux Distros Unpatched Vulnerability : CVE-2025-37806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user...

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 1)

Building the Bench This is the first in a three part series on building and using a testing bench for ICS systems. In this series we will build a physical test bench, review program logic to find flaws, perform manual exploitation of commonly used ICS protocols such as Modbus, then develop malwar...