8725 matches found
KLA90450 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Application Gateway can be exploited remotely to gain privileges. 2. An elevatio...
PT-2025-47643
Name of the Vulnerable Software and Affected Versions Azure Monitor affected versions not specified Description An elevation of privilege issue exists in Azure Monitor. This allows for unauthorized access and potential control over monitored resources. Recommendations At the moment, there is no...
CVE-2025-62207: Server-Side Request Forgery (SSRF)
Azure Monitor Elevation of Privilege Vulnerability...
Ambient and autonomous security for the agentic era
Over the past year, I've had countless conversations with customers who are striving to unlock human ambition with AI. They are on their journey to become Frontier Firms, where humans and agents push the boundaries of innovation and create new possibilities, empowering humans to become limitless...
The vulnerability of the SQL Anywhere Monitor, a database administration tool for relational database management systems like SAP SQL Anywhere, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the SQL Anywhere Monitor database administration tool of the SAP SQL Anywhere relational database management system lies in the use of rigidly programmed user credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...
It's a Feature, Not a Bug: Secure and Auditable State Rollback for Confidential Cloud Applications
Replay and rollback attacks threaten cloud application integrity by reintroducing authentic yet stale data through an untrusted storage interface to compromise application decision-making. Prior security frameworks mitigate these attacks by enforcing forward-only state transitions state continuit...
The vulnerability of the mlxreg_fan_set_cur_state() function in the drivers/hwmon/mlxreg-fan.c module of the Linux operating system’s hardware monitoring driver allows a hacker to cause a service failure.
The vulnerability of the mlxregfansetcurstate function in the drivers/hwmon/mlxreg-fan.c module of the Linux device monitoring driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a system failure...
Microsoft Patch Tuesday, November 2025 Edition
Microsoft this week pushed security updates to fix more than 60 vulnerabilities in its Windows operating systems and supported software, including at least one zero-day bug that is already being exploited. Microsoft also fixed a glitch that prevented some Windows 10 users from taking advantage of...
The vulnerability of the in_to_reg() function in the drivers/hwmon/nct6775.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the intoreg function in the drivers/hwmon/nct6775.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
SAP Business Connector Cross-Site Scripting Vulnerability (CNVD-2025-29169)
SAP Business Connector is a middleware from SAP, Germany. A cross-site scripting vulnerability exists in SAP Business Connector due to improper validation of user-supplied input in the PRTG Web Monitor web interface. An attacker could exploit the vulnerability to access or modify information with...
The vulnerability of the Azure Monitor monitoring service, related to buffer overflow in dynamic memory, allows a attacker to execute arbitrary code.
The vulnerability of the Azure Monitor monitoring service is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Azure Monitor Agent < 1.37.1 RCE (CVE-2025-59504)
The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.37.1. It is, therefore, affected by a Heap-based buffer overflow vulnerability which potentially allows an unauthorized attacker to execute code locally. Note that Nessus has not tested for this issue but has...
CVE-2025-40131
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...
Malicious code in cluster-wind-fork-view-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5047c654c3a5d136a00aaba828d7028a4483a1b72fb55a1d2ffff40fcb45f3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176758
Malicious code in refactor-cat-epsilon-interface-monitor npm...
EUVD-2025-178446
Malicious code in import-log-monitor-rho-function npm...
EUVD-2025-178156
Malicious code in lambda-quick-monitor-optimize-book npm...
EUVD-2025-180079
Malicious code in big-monitor-moon-iota-warn npm...
Malicious code in tau-import-float-monitor-finally (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...