CVE-2025-32710 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-22256

CVE-2025-22256 affects Fortinet FortiPAM and FortiSRA where improper handling of permissions enables improper access control via specially crafted HTTP requests. Affected: FortiPAM 1.0.0–1.4.1 and FortiSRA 1.4.0–1.4.1 (per multiple connected sources). Root cause: insufficient permissions handling...

CVE-2024-50562

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session...

CVE-2025-43589 InDesign Desktop | Use After Free (CWE-416)

InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-47105 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2025-49091

creationtimestamp| type| source ---|---|--- 2025-06-10 16:00:55+00:00| seen| https://seclists.org/oss-sec/2025/q2/242 2025-06-10 18:35:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lrbjvo2xda2s 2025-06-10 18:54:32+00:00| seen|...

CVE-2025-5335

creationtimestamp| type| source ---|---|--- 2025-06-10 15:53:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114659874146155178 2025-06-12 04:34:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18145...

CVE-2025-5353

creationtimestamp| type| source ---|---|--- 2025-06-10 15:51:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114659863942584780 2025-06-10 16:01:27+00:00| published-proof-of-concept| Telegram/Cx1-p36APBve2ZXOx6JZQ1ihep0qwdXJnQmLSJI9jXODK8 2025-06-11 04:33:14+00:00| seen|...

CVE-2025-49143

Summary: CVE-2025-49143 affects Nautobot before v2.4.10 and v1.6.32. The issue is improper access control on files stored in Nautobot’s MEDIA_ROOT, including DeviceType images and other attachments, which could be retrieved by anonymous users via guessed URLs. Affected versions: Nautobot 2.x vers...

CVE-2025-49143 Nautobot may allows uploaded media files to be accessible without authentication

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to v2.4.10 and v1.6.32 , files uploaded by users to Nautobot's MEDIAROOT directory, including DeviceType image attachments as well as images attached to a Location, Device, or Rack, are served to users via a URL endpoint...

CVE-2025-48937 matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. matrix-sdk-crypto since version 0.8.0 and up to 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those event...

CVE-2025-33060

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review...

CVE-2025-33063

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review...

CVE-2025-33069

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 23:33:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18026 2025-07-09 14:24:50+00:00| seen|...

CVE-2025-33071

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbmcabj6v2k 2025-06-11 04:33:25+00:00| seen|...

CVE-2025-32716

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review...

CVE-2025-47167

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 17:32:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17953 2025-06-10 20:06:46+00:00| seen|...

CVE-2025-47956

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-07-11 16:36:47+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3ltpbpc5ec62m 2025-07-15 17:21:04+00:00| seen|...

CVE-2025-47953

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 20:11:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbpb66vlm2q 2025-06-14 01:06:08+00:00| seen|...

CVE-2025-48067

OctoPrint (web interface for controlling consumer 3D printers) contains a vulnerability in versions up to and including 1.11.1 where an attacker with FILE_UPLOAD permission can exfiltrate host files that OctoPrint can read by moving them into the upload folder, from which they can be downloaded. ...