📰 Cyber Feed Aggregator

🛡️ Vulnerabilities

Latest Vulnerabilities coverage curated from trusted cybersecurity sources.

• CVE-2025-11393 - Insights-runtimes-tech-preview/runtimes-inventory-rhel8-operator: improper proxy configuration allows unauthorized administrative commands
  Latest High/Critical Vulnerabilitiy Feed — 2025-12-15T17:15:51.870Z

  CVE ID : CVE-2025-11393 Published : Dec. 15, 2025, 5:15 p.m. | 2 hours, 9 minutes ago Description : A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it...

• CVE-2025-60786 - IceScrum Zip Slip Arbitrary Code Execution
  Latest High/Critical Vulnerabilitiy Feed — 2025-12-15T16:15:52.807Z

  CVE ID : CVE-2025-60786 Published : Dec. 15, 2025, 4:15 p.m. | 3 hours, 9 minutes ago Description : A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file. Severity: 8.8 | HIGH Visit the link for more...

• CVE-2025-13888 - Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs
  Latest High/Critical Vulnerabilitiy Feed — 2025-12-15T16:15:50.333Z

  CVE ID : CVE-2025-13888 Published : Dec. 15, 2025, 4:15 p.m. | 3 hours, 9 minutes ago Description : A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An...

• CVE-2025-13824 - Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
  Latest High/Critical Vulnerabilitiy Feed — 2025-12-15T16:15:50.197Z

  CVE ID : CVE-2025-13824 Published : Dec. 15, 2025, 4:15 p.m. | 3 hours, 9 minutes ago Description : A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will...

• CVE-2024-44599 - FNT Command Directory Traversal Vulnerability
  Latest High/Critical Vulnerabilitiy Feed — 2025-12-15T16:15:48.460Z

  CVE ID : CVE-2024-44599 Published : Dec. 15, 2025, 4:15 p.m. | 3 hours, 9 minutes ago Description : FNT Command 13.4.0 is vulnerable to Directory Traversal. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...