PT-2025-4786 · Github · Github Desktop

Name of the Vulnerable Software and Affected Versions: GitHub Desktop versions prior to 3.4.12 Description: An attacker can access a user's credentials by convincing them to clone a repository directly or through a submodule using a maliciously crafted remote URL. GitHub Desktop relies on Git for...

GitHub Desktop 安全漏洞

GitHub Desktop is a GitHub desktop version of GitHub Desktop open source. A security vulnerability exists in GitHub Desktop versions prior to 3.4.12, which stems from an attacker inducing a user to clone a repository, either directly or through a submodule, which could allow an attacker to access...

Microsoft Patch Tuesday for January 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for January of 2025 which includes 159 vulnerabilities, including 12 that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." One notable critically rated vulnerability that has been patched this...

CVE-2025-21127

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of...

CVE-2025-21122

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

CVE-2025-21122

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

CVE-2025-21122 Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

CVE-2025-21127 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of...

CVE-2025-21127 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of...

CVE-2025-21127

Adobe Photoshop Desktop (Windows/macOS) is affected by CVE-2025-21127: Uncontrolled Search Path Element. Versions 25.12, 26.1 and earlier may load a malicious library if the user runs the vulnerable app, due to improper handling of the search PATH. The underlying root cause is an uncontrolled sea...

CVE-2025-21330

Windows Remote Desktop Services Denial of Service Vulnerability...

CVE-2025-21309

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2025-21309

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2025-21297

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2025-21297

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2025-21278

Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...

CVE-2025-21278

Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...

CVE-2025-21225

Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...

CVE-2025-21225

Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...

CVE-2025-21225 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

...