2792 matches found
CVE-2023-53420
In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfslistxattr Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in ntfslistea fs/ntfs3/xattr.c:191 inline BUG: KASAN: slab-out-of-bounds in ntfslistxattr+0x401/0x5...
The API Battleground: Why APIs are the new frontline—and how to stop the stealthiest attacks
APIs used to be the quiet backstage crew that made apps feel magical. Now attackers have learned the script — they walk onstage, deliver perfectly polite lines, and walk off with the props. In H1 2025 Imperva observed 40,000+ API incidents across 4,000+ monitored environments , including an...
CVE-2023-53312
In the Linux kernel, the following vulnerability has been resolved: net: fix netdevstartxmit trace event vs skbtransportoffset After blamed commit, we must be more careful about using skbtransportoffset, as reminded us by syzbot: WARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868...
The vulnerability of the cloud platform for creating and deploying intelligent chatbots in Azure Bot Service lies in the lack of access control mechanisms, which allows attackers to escalate their privileges.
The vulnerability of the Azure Bot Service, a cloud platform for creating and deploying intelligent chatbots, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
teler-waf
This repository is an open-source Go HTTP middleware called teler-waf, which protects local web services from various threats, including OWASP Top 10 vulnerabilities, malicious actors, botnets, and brute force attacks. The repository contains a variety of files, including issue templates, pull...
CVE-2025-9111
The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Linux Distros Unpatched Vulnerability : CVE-2020-15251
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Channelmgnt plug-in for Sopel a Python IRC bot before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass...
CVE-2025-9111
The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2025-55244
Azure Bot Service Elevation of Privilege Vulnerability...
Basecamp: Improper bot-authentication allows to impersonate any user when sending messages in a room
A vulnerability was discovered in the bot authentication mechanism. The issue allowed an unauthenticated user to impersonate any user and post messages in rooms the impersonated user had access to. The bot authentication function failed to properly validate the bot key, allowing a partial key to...
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. "The packages masquerade as legitimate cryptographic utilities and Flashbots MEV infrastructure while secretly exfiltrating...
CVE-2025-55244
Azure Bot Service Elevation of Privilege Vulnerability...
CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability
...
CVE-2025-55244
Technical details about CVE-2025-55244 are not provided in the connected documents. Public info only notes an Azure Bot Service elevation of privilege vulnerability; monitor Microsoft advisories for updates and fixes.
CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability
...
PT-2025-36100
Name of the Vulnerable Software and Affected Versions: Azure Bot Service affected versions not specified Description: An elevation of privilege issue exists within the Azure Bot Service. This allows for unauthorized privilege escalation. Recommendations: At the moment, there is no information abo...
KLA87341 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Bot Service can be exploited remotely to gain privileges. 2. An elevation ...
CVE-2025-55244: Improper Access Control
Azure Bot Service Elevation of Privilege Vulnerability...
Microsoft Azure Bot Service 访问控制错误漏洞
Microsoft Azure Bot Service is a hosted service for developing, deploying, and managing intelligent chatbots from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Bot Service that stems from elevation of privilege...