HP Support Assistant 9.55.10.0 Fixes Local Privilege Escalation
HP Support Assistant before 9.55.10.0 has a local privilege-escalation flaw involving insufficient access controls. Update affected endpoints through HP's supported channel and verify installed versions; this is not an unauthenticated network attack.
CKAN MCP Server 0.4.108 Addresses an SSRF Validation Bypass
CKAN MCP Server can reach internal services through attacker-controlled DNS names. The advisory lists 0.4.108 as patched; update self-hosted deployments and restrict allowed destinations without treating the version claim as independently tested containment.
Sync-in Server Updates Fix 2FA, ReDoS, and Login Enumeration Flaws
Sync-in Server 2.4.1 addresses MFA weaknesses, costly sync-filter processing and login-timing enumeration. Update beyond 2.4.0, then check token enforcement, registration lockout and sync behavior with approved accounts.
NotebookLM MCP 2.0.3 Restricts Vault File Writes
NotebookLM MCP 2.0.3 sanitizes vault filenames, but directory containment remains opt-in. Upgrade affected servers, configure NOTEBOOKLM_VAULT_ROOT in the running process, and restrict its filesystem permissions; updating alone does not contain writes.
F5 BIG-IP APM Hotfixes Address Critical OAuth Vulnerability
BIG-IP APM OAuth Authorization Server configurations face an exploited unauthenticated code-execution flaw. Preserve evidence, obtain F5's supported mitigation and hotfix, and keep forensic triage separate from successful patch installation.
Smart Home Device Inventory: The Spreadsheet That Saves Your Future Self
Map smart-home devices to controllers, entities, power sources and dependent automations. Store setup-code references rather than secrets in the inventory, and keep a protected copy available when the controller is down.
TR-CERT Warns of Critical SQL Injection in Unsupported KarelIPS
Unsupported KarelIPS has an unauthenticated blind SQL-injection flaw with no fixed release identified. Restrict exposure, preserve relevant evidence and plan retirement or replacement; compensating controls do not repair the defect.