-
CVE-2025-52496: Mbed TLSan open-source C library design weakness (6th July 2025)
Preface: What is the difference between FreeRTOS and Cmsis-RTOS? Basically FreeRTOS is a RTOS, while CMSIS-RTOS is only a wrapper for any RTOS (like FreeRTOS, CMSIS-RTOS RTX or anything you want). CMSIS-RTOS is an API that enables consistent software layers with middleware and library components. Mbed TLS aims to provide a set of powerful and…
-
CVE-2025-6073 – Industrial Controls Be Aware! (4th July 2025)
Preface: The default configuration of the ABB RMC-100’s REST interface is disabled. ABB recommends leaving the REST interface disabled when not in use, particularly when configuring MQTT functionality. The RMC-100 is not intended for access over public networks. Background: The ABB RMC-100 is a popular and widely used remote modular controller, particularly within the oil…
-
CVE-2025-46647: A vulnerability of plugin openid-connect in Apache APISIX.(3rd July 2025)
Preface: API Gateway can be helpful for ChatGPT plugin developers to expose, secure, manage, and monitor their API endpoints. This repo demonstrates how to use Apache APISIX API Gateway as a front door for communication between ChatGPT custom plugins and backend APIs. For more details, please refer to the link – https://github.com/Boburmirzo/apisix-chatgpt-gateway-plugin Background: The primary…
-
CVE-2025-0038 exposes a runtime vulnerability due to missing checks in PMU firmware. (2nd July 2025)
Preface: Users typically build custom PMU firmware tailored to their specific hardware platform and application requirements. PMU firmware can be loaded by either FSBL or CSU BootROM (CBR). Both these flows are supported by AMD. Loading PMU firmware using FSBL has the following benefits: – Possible quick boot time, when PMU firmware is loaded after…
-
CVE-2025-49521: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (1st July 2025)
Preface: Ansible Automation Platform is a broader enterprise automation platform designed to manage and automate various IT operations, including infrastructure, cloud, networking, and security. While it can be used for automating web server deployments and configurations. Besides, web hosting service providers can and often do use the Ansible Automation Platform for automating various tasks related…