CVE-2025-62565 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

CVE-2025-62565 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658

CVE-2025-64658 is a Windows Shell elevation-of-privilege vulnerability described as a race condition caused by concurrent execution using a shared resource. The available connected documents confirm impact as local privilege escalation for an attacker with local access and low privileges, requiri...

Windows File Explorer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows File Explorer Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

📄 Microsoft Windows File Explorer NTLM Hash Disclosure

Microsoft Windows File Explorer in Windows 10 and 11 contains a critical NTLM hash disclosure vulnerability that allows attackers to capture user authentication credentials by exploiting the automatic parsing of .library-ms files from ZIP archives, leading to potential domain compromise through...

Adobe Experience Manager (AEM) CRX Content Explorer

This plugin detects the presence of the Adobe Experience Manager AEM CRX Content Explorer interface. The CRX Content Explorer is a web-based interface used to manage and interact with the content repository of Adobe Experience Manager. No source data...

Liferay Portal API Explorer Detected

This is an informational plugin to inform the user that the scanner has detected that the target Liferay instance publicly expose the API explorer. No source data...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-2405...

November 20, 2025—KB5070312 (OS Build 22631.6276) Preview

None None...

CVE-2025-63694

DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...

CVE-2025-63694

DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...

PT-2025-47371

Name of the Vulnerable Software and Affected Versions DzzOffice versions prior to 2.3.8 Description DzzOffice versions 2.3.7 and before have a SQL Injection issue in the 'explorer/groupmanage' component. The issue allows for potential manipulation of database queries through the...

CVE-2025-63694

DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...

DzzOffice 安全漏洞

DzzOffice is a platform from Big Desk DzzOffice that provides online collaborative office suite functionality. It provides online documents, forms, webstores, presentations and other features. A security vulnerability exists in DzzOffice v2.3.7 and earlier versions, which stems from...

EUVD-2025-198055

DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...

D-Link DIR-816L Buffer Overflow Vulnerability

DIR-816L is a wireless router product from D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-816L version 206b09beta, which stems from failure to properly validate the input length when manipulating the en parameter of the scandirmain function in the /portal/ajaxexporer.sgi...