A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
A vulnerability in Zcash zcashd versions before 6.12.0 allows acceptance of invalid transactions due to improper verification of Sprout proofs. This flaw could potentially lead to the draining of user funds from the Sprout pool. The issue is classified as CWE-358, indicating an improperly implemented security check. The CVSS score is 3.5, reflecting a low severity with limited impact and exploitation complexity. No official patch or remediation guidance is currently confirmed from the vendor. There are no known exploits in the wild at this time.
CVE-2025-66600 is a high-severity vulnerability in Yokogawa Electric Corporation's FAST/TOOLS software versions R9.01 through R10.04. The issue stems from the lack of HTTP Strict Transport Security (HSTS) configuration, which exposes communications to interception via man-in-the-middle (MITM) attacks. This vulnerability allows attackers to sniff sensitive data transmitted between clients and the web server. Exploitation requires no authentication or user interaction and can be performed remotely over the network. Although no known exploits are currently in the wild, the vulnerability poses a significant risk to confidentiality. European organizations using FAST/TOOLS in critical industrial control or SCADA environments could face data breaches or operational disruptions. Mitigation involves enabling HSTS on the web server, enforcing HTTPS connections, and monitoring network traffic for suspicious activity. Countries with substantial industrial automation sectors and Yokogawa customer bases, such as Germany, France, Italy, and the UK, are most likely to be affected.
CVE-2025-66601 is a medium-severity vulnerability in Yokogawa Electric Corporation's FAST/TOOLS software versions R9.01 to R10.04. The flaw arises because the product does not specify MIME types, enabling attackers to perform content sniffing attacks that could lead to execution of malicious scripts. This vulnerability does not require authentication or user interaction but has limited impact on confidentiality and integrity. No known exploits are currently in the wild. European organizations using FAST/TOOLS in critical industrial control systems could face risks of unauthorized script execution, potentially disrupting operations or enabling further attacks. Mitigation involves applying vendor patches when available, enforcing strict content-type headers via web server configurations, and network segmentation of affected systems. Countries with significant industrial automation sectors and Yokogawa customer bases, such as Germany, France, Italy, and the UK, are most likely to be impacted.
CVE-2025-66603 is a low-severity vulnerability in Yokogawa Electric Corporation's FAST/TOOLS software versions R9.01 to R10.04. The issue arises because the web server accepts the HTTP OPTIONS method, which can disclose information about supported HTTP methods. While this does not directly allow exploitation, it can aid attackers in reconnaissance and facilitate other attacks. The vulnerability does not require authentication but does require user interaction and has a high attack complexity, limiting its exploitability. There are no known exploits in the wild, and no patches have been released yet. European organizations using FAST/TOOLS in critical industrial control systems should be aware of this issue. Mitigations include restricting or disabling the OPTIONS method on the web server and monitoring for unusual HTTP requests. Countries with significant industrial automation sectors using Yokogawa products, such as Germany and the UK, may be more affected.
CVE-2025-66607 is a medium-severity vulnerability in Yokogawa Electric Corporation's FAST/TOOLS software versions R9.01 to R10.04. The flaw involves an insecure setting in the HTTP response header that could allow attackers to redirect users to malicious websites. Exploitation requires no authentication or user interaction but has a high attack complexity. The vulnerability affects multiple FAST/TOOLS packages including RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB. Although no known exploits are currently reported in the wild, the issue poses a risk to the integrity of user navigation and could facilitate phishing or malware delivery. European organizations using FAST/TOOLS in critical industrial control systems should prioritize patching or mitigating this vulnerability. Countries with significant industrial automation sectors and Yokogawa customer bases, such as Germany, France, and the UK, are most likely to be impacted. Mitigation involves careful configuration of HTTP headers, monitoring for suspicious redirects, and applying vendor patches once available.
BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single (possibly large) file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection can be configured by the user. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.
CVE-2025-58308 is a high-severity vulnerability in Huawei HarmonyOS versions 5.0.1, 5.1.0, and 6.0.0, caused by an improperly implemented security check in the call module. Exploitation can lead to abnormal behavior of system features, impacting confidentiality, integrity, and availability. The vulnerability requires local access but no privileges or user interaction, making exploitation moderately challenging. There are no known exploits in the wild yet, and no patches have been released.
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versions 7.0.11 and below, as well as 8.0.0, are vulnerable to detection bypass when crafted traffic sends multiple SYN packets with different sequence numbers within the same flow tuple, which can cause Suricata to fail to pick up the TCP session. In IDS mode this can lead to a detection and logging bypass. In IPS mode this will lead to the flow getting blocked. This issue is fixed in versions 7.0.12 and 8.0.1.
CVE-2025-10457 is a medium severity vulnerability in Zephyr RTOS versions prior to 4.3.0. The issue arises because the BLE connection response handler does not verify if a response is expected and relies solely on identifier matching. This improper security check can lead to incorrect handling of BLE connection responses, potentially causing denial of service.
SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the evaluation of multiple caveated branches, requests may return a negative response when a positive response is expected. Version 1.44.2 fixes the issue. As a workaround, do not use caveats in the schema over an arrow’ed relation.
