CVE-2025-2585

EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-29814

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

NCSC Releases Post-Quantum Cryptography Timeline

The UK's National Computer Security Center part of GCHQ released a timeline--also see their blog post--for migration to quantum-computer-resistant cryptography. It even made The Guardian...

CVE-2025-2585

EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-2585

CVE-2025-2585 concerns the EBM Maintenance Center from EBM Technologies. Multiple connected sources confirm a SQL Injection vulnerability that allows remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents. The issue is driven by imp...

CVE-2025-29814

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

CVE-2025-29814

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

CVE-2025-29814 Microsoft Partner Center Elevation of Privilege Vulnerability

...

CVE-2025-29814 Microsoft Partner Center Elevation of Privilege Vulnerability

...

EUVD-2025-7178

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

CVE-2025-29814

Technical details about CVE-2025-29814 are not provided in the connected documents. Public information here only notes an elevation of privileges in Microsoft Partner Center; no affected versions, exploit details, or fixes are included. Monitor for updates.

CVE-2025-30234

SmartOS, as used in Triton Data Center and other products, has static host SSH keys in the 60f76fd2-143f-4f57-819b-1ae32684e81b image a Debian 12 LX zone image from 2024-07-26...

EBM Technologies EBM Maintenance Center SQL注入漏洞

EBM Technologies EBM Maintenance Center is a maintenance center platform from China-based EBM Technologies EBM Technologies. A SQL injection vulnerability exists in EBM Technologies EBM Maintenance Center versions prior to 25.04.31435, which stems from an SQL injection that could lead to a remote...

CVE-2025-2495

Stored Cross-Site Scripting XSS in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to upload XML files to the server with JavaScript code injected via the ‘/softdial/scheduler/save.php’ resource. The injected code will execute when the uploaded file is loaded via the...

CVE-2025-2493

Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised access to sensitive files outside the...

CVE-2025-2494

Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload files to the server via the ‘/softdial/phpconsole/upload.php’ endpoint, which is protected by basic HTTP authentication. The files are uploaded to a directory exposed by the web...

Microsoft Partner Center Elevation of Privilege Vulnerability

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

PT-2025-12386 · Microsoft · Partner Center

Name of the Vulnerable Software and Affected Versions: Microsoft Partner Center affected versions not specified Description: The issue is related to improper authorization in Microsoft Partner Center, which allows an authorized attacker to elevate privileges over a network. Recommendations: At th...

PT-2025-12012

Name of the Vulnerable Software and Affected Versions BCryptPasswordEncoder affected versions not specified Description The issue concerns the BCryptPasswordEncoder, where the matchesCharSequence, String function will incorrectly return true for passwords larger than 72 characters, as long as the...

Microsoft Partner Center 输入验证错误漏洞

Microsoft Partner Center is an online platform from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Partner Center, which stems from an attacker's ability to elevate privileges by exploiting the vulnerability...