Microsoft Windows Internet Information Services（IIS）和Microsoft Inbox COM Objects 资源管理错误漏洞

Microsoft Windows Internet Information Services IIS and Microsoft Inbox COM Objects are both products of Microsoft Corporation.Microsoft Windows Internet Information Services is a web server for the Windows Server platform. Information Services is a web server for the Windows Server...

PT-2025-42066

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. The issue involves the improper handling of memory,...

PT-2025-42072

Name of the Vulnerable Software and Affected Versions Inbox COM Objects affected versions not specified Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...

EUVD-2005-4204

Malware in sbrugna...

EUVD-2021-16230

Malware in sbrugna...

EUVD-2002-2144

Malware in sbrugna...

EUVD-1999-1349

Malware in sbrugna...

EUVD-2010-2035

Malware in sbrugna...

EUVD-2014-2165

Malware in sbrugna...

EUVD-2006-3472

Malware in sbrugna...

EUVD-2021-15985

Malware in sbrugna...

EUVD-2020-30522

Malware in sbrugna...

EUVD-2001-1080

Malware in sbrugna...

EUVD-2024-3544

Malicious code in bioql PyPI...

EUVD-2025-30203

Malicious code in bioql PyPI...

EUVD-2025-24641

Malicious code in bioql PyPI...

Hackers Exploit Milesight Routers to Send Phishing SMS to European Users

Unknown threat actors are abusing Milesight industrial cellular routers to send SMS messages as part of a smishing campaign targeting users in European countries since at least February 2022. French cybersecurity company SEKOIA said the attackers are exploiting the cellular router's API to send...

CVE-2025-59421

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. A bad actor can flood the inbox of a user by repeatedly sending invites duplicate. The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615...

ChatGPT Deep Research zero-click vulnerability fixed by OpenAI

OpenAI has moved quickly to patch a vulnerability known as “ShadowLeak” before anyone detected real-world abuse. Revealed by researchers yesterday, ShadowLeak was an issue in OpenAI’s Deep Research project that attackers could exploit by simply sending an email to the target. Deep Research was...

CVE-2025-59421

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. A bad actor can flood the inbox of a user by repeatedly sending invites duplicate. The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615...