CVE-2025-41699

creationtimestamp| type| source ---|---|--- 2025-10-14 13:43:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372814013214488 2025-10-14 13:45:05+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3m35uerwse5t2...

CVE-2025-41704

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-17 08:37:13+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3m3eulxahcx2d 2025-10-18 07:11:13+00:00| seen|...

CVE-2025-41706

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-17 08:37:13+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3m3eulxahcx2d 2025-10-18 07:11:13+00:00| seen|...

CVE-2025-41707

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-18 07:11:13+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m3haazui6k2l...

CVE-2025-41705

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973...

GHSA-7GWH-MW97-QJGP

creationtimestamp| type| source ---|---|--- 2025-10-14 13:30:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372761539343120...

GHSA-R2FH-JR9C-9PXH

creationtimestamp| type| source ---|---|--- 2025-10-14 13:28:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372754053187636...

GHSA-F3Q3-RMF7-9655

creationtimestamp| type| source ---|---|--- 2025-10-14 13:28:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372754053187636...

CVE-2025-20720

creationtimestamp| type| source ---|---|--- 2025-10-14 13:27:35+00:00| seen| https://gist.github.com/Darkcrai86/32425f3e5e9c4b16c78794cb3b4f40f7 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192 2026-07-13 22:00:05+00:00| seen|...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...

PT-2025-42128

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper input validation in Microsoft Exchange Server can allow an unauthorized attacker to perform spoofing over a network. Recommendations At the moment, there is no...

PT-2025-42129

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An issue with weak authentication in Microsoft Exchange Server could allow an authorized attacker to elevate privileges on a network. Recommendations At the moment, there is...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...

PT-2025-42005

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An incorrect implementation of the authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally. An unauthenticated...

Security Updates for Microsoft Exchange Server (October 2025)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the October, 2025 security bulletin. - Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate...

Microsoft Exchange Server 输入验证错误漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

KLA89271 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited...

CVE-2025-35061

Newforma Info Exchange NIX '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the user-configured NIX service account...

CVE-2025-35060

Newforma Info Exchange NIX provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent...

CVE-2025-35057

Newforma Info Exchange NIX '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the NIX service account...