Lucene search
+L

5766 matches found

BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•22 views

The vulnerability of the Windows Core Messaging component in Windows operating systems allows a perpetrator to elevate their privileges to a system-level level.

The vulnerability of the Windows Core Messaging component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...

7.5CVSS5.7AI score0.00674EPSS
SaveExploits0References2
Wired Threat Level
Wired Threat Level
•added 2025/03/12 5:17 p.m.•92 views

How to Use Signal Encrypted Messaging

The best end-to-end encrypted messaging app has a host of security features. Here are the ones you should care about...

1AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/03/12 9:42 a.m.•7 views

CVE-2025-21847 ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...

7.7AI score0.00218EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/03/12 12:00 a.m.•15 views

The vulnerability of the MFlash secure data exchange platform lies in the lack of mechanisms for neutralizing elements related to CSV files, allowing attackers to execute arbitrary commands.

The vulnerability of the MFlash secure messaging platform is related to the lack of mechanisms for neutralizing elements related to CSV files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/12 12:00 a.m.•22 views

The vulnerability of the MFlash secure data exchange platform lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially crafted HTML code...

8.7CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/12 12:00 a.m.•12 views

The vulnerability of the MFlash secure data exchange platform lies in its insufficient authentication attempt limitation, which allows a perpetrator to gain unauthorized access to the platform.

The vulnerability of the MFlash secure messaging platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the platform...

10CVSS5.5AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2025/03/11 5:16 p.m.•12 views

CVE-2025-26634

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...

7.5CVSS6.1AI score0.00674EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/11 5:16 p.m.•26 views

CVE-2025-26634

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...

7.5CVSS0.00674EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/11 4:50 p.m.•41 views

CVE-2025-26634 Windows Core Messaging Elevation of Privileges Vulnerability

...

7.5CVSS0.00674EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/11 4:50 p.m.•7 views

CVE-2025-26634 Windows Core Messaging Elevation of Privileges Vulnerability

...

7.5CVSS7.6AI score0.00674EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 4:50 p.m.•117 views

CVE-2025-26634

CVE-2025-26634 describes a heap-based buffer overflow in Windows Core Messaging that could allow an unauthenticated? not; authorized attacker to elevate privileges over a network. The CVE entry lists a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality/i...

7.5CVSS7.7AI score0.00674EPSS
SaveExploits0References1Affected Software12
Microsoft CVE
Microsoft CVE
•added 2025/03/11 2:00 p.m.•36 views

Windows Core Messaging Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...

7.5CVSS7.5AI score0.00674EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•9 views

PT-2025-10849 · Microsoft · Windows Core Messaging +1

Name of the Vulnerable Software and Affected Versions: Windows Core Messaging affected versions not specified Description: A heap-based buffer overflow issue in Windows Core Messaging allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no...

7.5CVSS6.3AI score0.00674EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•1 views

CVE-2025-26634: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...

7.5CVSS7.5AI score0.00674EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/02/28 3:15 a.m.•11 views

CVE-2025-0975

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters...

8.8CVSS5.9AI score0.00679EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/28 3:15 a.m.•11 views

CVE-2025-23225

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue...

6.5CVSS5.8AI score0.00442EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/28 3:15 a.m.•29 views

CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS5.7AI score0.00127EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•20 views

IBM MQ 安全漏洞

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and validated messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ that stems from storing sensitive information in...

6.5CVSS6AI score0.00262EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•14 views

IBM MQ 安全漏洞

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A denial of service vulnerability exists in IBM MQ that stems from improper handling of invalid heade...

6.5CVSS6.5AI score0.00442EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/02/27 12:00 a.m.•15 views

The vulnerability of the Core Messaging component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Core Messaging component in Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.7AI score0.00766EPSS
SaveExploits0References2
Rows per page
Query Builder