November 11, 2025—KB5068907 (Monthly Rollup)

None None...

November 11, 2025—KB5068905 (Monthly Rollup)

None None...

December 9, 2025—KB5071505 (Monthly Rollup)

None None...

KB5071503: Windows Server 2012 R2 Security Update (December 2025)

The remote Windows host is missing security update 5071503. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...

PT-2025-49118

There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure. Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacker to read arbitrary files. This vulnerability...

CVE-2012-3417

creationtimestamp| type| source ---|---|--- 2025-12-01 20:45:56+00:00| seen| https://gist.github.com/batamimam08-netizen/9b175a7367548d791fd35c6f470b7fac...

CVE-2012-2133

creationtimestamp| type| source ---|---|--- 2025-12-01 20:45:56+00:00| seen| https://gist.github.com/batamimam08-netizen/9b175a7367548d791fd35c6f470b7fac...

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows DirectX 竞争条件问题漏洞

Microsoft Windows DirectX is a DirectX end-user runtime Web installer from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Windows DirectX. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are...

KB5068905: Windows Server 2012 R2 Security Update (November 2025)

The remote Windows host is missing security update 5068905. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60714,...

KB5071813: Servicing stack update for Windows Server 2012: November 11, 2025

None None...

KB5068907: Windows Server 2012 Security Update (November 2025)

The remote Windows host is missing security update 5068907. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60714,...

CVE-2013-10071

Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting XSS vulnerability in the dashboard dashlet AJAX load functionality. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2012-10063

creationtimestamp| type| source ---|---|--- 2025-10-31 17:56:39+00:00| seen| Telegram/kTHlmgotA4JNDFFLYHYuwZXwSUEl8wy0nbFjEXqgtTlcWrI...

CVE-2012-5887

creationtimestamp| type| source ---|---|--- 2025-10-30 15:53:02+00:00| seen| Telegram/8U3OaBcPJBUiOBdwtfJAZZycsFv4zeu5BNM3EnWX8MYOtgs...

KB5070887: Windows Server 2012 WSUS RCE (CVE-2025-59287)

The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...

CVE-2012-2090

creationtimestamp| type| source ---|---|--- 2025-10-17 17:52:23+00:00| seen| https://gist.github.com/EbonJaeger/99dd58f015b229c6f25edb5dae784966...

EUVD-2011-5263

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

CVE-2011-10033 WordPress Plugin is-human <= v1.4.2 Eval Injection RCE

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

2025-10 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 (KB5066740)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...