CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-21104

Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site 'Open Redirect' Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted applicatio...

PT-2025-11219

Name of the Vulnerable Software and Affected Versions: Inova Logic CUSTOMER MONITOR CM version 3.1.757.1 Description: The issue is related to incorrect access control in the scheduled tasks console, allowing attackers to escalate privileges by placing a crafted executable into a scheduled task...

InovaLogic CUSTOMER MONITOR 安全漏洞

InovaLogic CUSTOMER MONITOR is a sophisticated IT monitoring and management software from InovaLogic that significantly improves the reliability of IT infrastructure and simplifies remote IT systems. A security vulnerability exists in InovaLogic CUSTOMER MONITOR v3.1.757.1, which stems from...

PT-2025-11167 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions 19.11.0.3 and below Description: The issue is an Open Redirect Vulnerability in NMC, which could allow an unauthenticated attacker with remote access to redirect a targeted application user to arbitrary web URLs. This...

CVE-2025-25598

The Inova Logic CUSTOMER MONITOR (CM) software, specifically version v3.1.757.1 , contains an incorrect access control vulnerability within the scheduled tasks console . This flaw allows an attacker to achieve privilege escalation by placing a crafted executable into a scheduled task. While no sp...

CVE-2025-21104: URL Redirection to Untrusted Site

Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site 'Open Redirect' Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted applicatio...

CVE-2025-25598: Improper Access Control

Incorrect access control in the scheduled tasks console of Inova Logic CUSTOMER MONITOR CM v3.1.757.1 allows attackers to escalate privileges via placing a crafted executable into a scheduled task...

March Microsoft Patch Tuesday

March Microsoft Patch Tuesday. 77 CVEs, 20 of which were added during the month. 7 vulnerabilities with signs of exploitation in the wild: RCE - Windows Fast FAT File System Driver CVE-2025-24985 RCE - Windows NTFS CVE-2025-24993 SFB - Microsoft Management Console CVE-2025-26633 EoP - Windows Win...

Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as "critical". There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted...

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability

...

CVE-2025-26633

CVE-2025-26633 is a local-privilege-escalation in Microsoft Management Console (MMC) caused by improper neutralization in how MMC loads language-twin .msc files. A malicious “evil twin” .msc in a language directory can execute payloads with the user’s privileges when a user opens a legitimate MMC...

CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability

...

CVE-2024-45328

An incorrect authorization vulnerability CWE-863 in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu...

CVE-2024-45328

FortiSandbox 4.4.0–4.4.6 contains an improper authorization vulnerability (CWE-863) that can let a low-privilege administrator execute elevated CLI commands via the GUI console menu. Affected component: FortiSandbox GUI/CLI integration (exact files/functions not detailed in the provided sources)....

CVE-2024-45328

An incorrect authorization vulnerability CWE-863 in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu...

Microsoft Management Console Security Feature Bypass Vulnerability

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-24983link is external Microsoft Windows Win32k Use-After-Free Vulnerability CVE-2025-24984link is external Microsoft Windows NTFS Information Disclosure...