whitelist – Experimental News Clipping Site

Embrace The Red: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation

Aug 3, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/anthropic-filesystem-mcp-server-bypass/ Source: Embrace The Red Title: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation Feedly Summary: A few months ago I was looking at the filesystem MCP server from Anthropic. The server allows to give an AI, like Claude Desktop, access to the local filesystem to read files or edit…

Bulletins: Vulnerability Summary for the Week of June 23, 2025

Jun 30, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-181 Source: Bulletins Title: Vulnerability Summary for the Week of June 23, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 70mai–M300 A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknown functionality of the component Telnet…

Cloud Blog: Protecting the Core: Securing Protection Relays in Modern Substations

Jun 30, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/securing-protection-relays-modern-substations/ Source: Cloud Blog Title: Protecting the Core: Securing Protection Relays in Modern Substations Feedly Summary: Written by: Seemant Bisht, Chris Sistrunk, Shishir Gupta, Anthony Candarini, Glen Chason, Camille Felx Leduc Introduction — Why Securing Protection Relays Matters More Than Ever Substations are critical nexus points in the power grid, transforming high-voltage electricity…

Bulletins: Vulnerability Summary for the Week of May 26, 2025

Jun 2, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-153 Source: Bulletins Title: Vulnerability Summary for the Week of May 26, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1000 Projects–Daily College Class Work Report Book A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is…

Slashdot: Curl Warns GitHub About ‘Malicious Unicode’ Security Issue

May 17, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://developers.slashdot.org/story/25/05/17/0420236/curl-warns-github-about-malicious-unicode-security-issue?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Curl Warns GitHub About ‘Malicious Unicode’ Security Issue Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a security issue related to the use of Unicode characters in URLs within the Curl project, highlighting the impact of such changes and the subsequent measures taken to address it.…

Bulletins: Vulnerability Summary for the Week of April 21, 2025

Apr 28, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-118 Source: Bulletins Title: Vulnerability Summary for the Week of April 21, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info AdeptLanguage–Adept Adept is a language for general purpose programming. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses actions/upload-artifact@v4 to upload the mac-standalone artifact. This artifact is…

The Register: Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist

Mar 20, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/03/20/infoseccers_criticize_veeam_over_critical/ Source: The Register Title: Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist Feedly Summary: Palming off the blame using an ‘unknown’ best practice didn’t go down well either In patching the latest critical remote code execution (RCE) bug in Backup and Replication, software shop Veeam is attracting criticism from…

Tag: whitelist

Embrace The Red: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation

Bulletins: Vulnerability Summary for the Week of June 23, 2025

Cloud Blog: Protecting the Core: Securing Protection Relays in Modern Substations

Bulletins: Vulnerability Summary for the Week of May 26, 2025

Slashdot: Curl Warns GitHub About ‘Malicious Unicode’ Security Issue

Bulletins: Vulnerability Summary for the Week of April 21, 2025

The Register: Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist