6252 matches found
PT-2025-40015
Name of the Vulnerable Software and Affected Versions NVIDIA Delegated Licensing Service affected versions not specified Description The NVIDIA Delegated Licensing Service for all appliance platforms has a flaw that could allow a user or attacker to trigger an authorized action. Exploitation of...
PT-2025-40016
Name of the Vulnerable Software and Affected Versions NVIDIA Delegated Licensing Service affected versions not specified Description The NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection issue. An attacker may be able to cause an authorized action, potentiall...
Cache Key Confusion
Next.js is vulnerable to cache key confusion. The vulnerability is due to improper handling of request headers in the Image Optimization API routes, which allows an attacker to receive cached image responses intended for authorized users...
XSS-CTF
XSS-CTF Contains hands-on XSS test cases from beginner...
XSS-CTFs
XSS-CTFs Contains hands-on XSS test cases from beginner...
CVE-2025-58457
Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions. This issue affects Apache ZooKeeper: from 3.9.0 before 3.9.4. Users are recommended to upgrade to version 3.9.4, which fixes the issue. The issue can be...
CVE-2025-59215
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2025-10650
SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH. Affects non-production debug and internal development builds created between versions 2.5.0 a...
CVE-2025-59220
CVE-2025-59220 involves a race condition in the Microsoft Windows Bluetooth Service, caused by improper synchronization of shared resources. The vulnerability enables an authenticated, local attacker to elevate privileges. The connected CNVD entry describes a resource-management error in the Wind...
CVE-2025-59215
CVE-2025-59215 is a Windows Graphics Component elevation-of-privilege vulnerability. Multiple sources describe a use-after-free/resource-management error in the Microsoft Graphics Component that can allow an authenticated, local attacker to obtain higher privileges. The NVD entry notes local priv...
CVE-2025-10650
SoftIron HyperCloud versions 2.5.0–2.6.3 have a root-cause issue where user SSH keys can be added to the administrator-level authorized_keys under certain conditions, enabling unauthorized privilege escalation via SSH. The exposure is limited to non-production debug/internal development builds cr...
Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
PT-2025-38494
Name of the Vulnerable Software and Affected Versions Windows Bluetooth Service affected versions not specified Description A race condition exists within the Windows Bluetooth Service due to concurrent execution using a shared resource with improper synchronization. This allows an authorized...
ysoserial
This is a proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, called ysoserial, is a collection of utilities and property-oriented programming "gadget chains" discovered in common Java libraries that can, under the right conditions, exploit Jav...
ysoserial
This is a Java-based proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, named ysoserial, is designed to create gadgets that can be used to execute arbitrary commands on a vulnerable application. The gadgets are created by wrapping a...
CVE-2025-54104
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-55226
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to execute code locally...
CVE-2025-54098
Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally...