3998 matches found
PowerShell Elevation of Privilege Vulnerability
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
Microsoft PowerShell Remote Code Execution Vulnerability
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
PowerShell Information Disclosure Vulnerability
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
CVE-2026-70337: Relative Path Traversal
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
PT-2026-70770
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell Core affected versions not specified Description A relative path traversal issue exists in Microsoft PowerShell Core. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Path traversal is a...
PT-2026-70402
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Incorrect default permissions in Microsoft PowerShell allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a...
CVE-2026-59119: Incorrect Default Permissions
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-73250: Improper Neutralization of Special Elements used in a Command
Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory $INSTDIR from PowerEditor/installer/nppSetup.nsi into a PowerShell -Command string used by RegisterMSIX to invoke...
CVE-2026-70338: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
PT-2026-70941
Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The Windows 11 x64 and ARM64 installer for this source code editor contains a command injection flaw. The installer passes the installation directory variable $INSTDIR from...
CVE-2026-58612: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
PT-2026-70771
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper control of code generation in Microsoft PowerShell enables an unauthorized attacker to locally bypass a security feature through code injection, which is the process of...
PT-2026-70396
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell Core affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to disclose information over a network. SSRF is a flaw where an attacker can induce the server-side...
Photon OS 5.0: Powershell PHSA-2023-5.0-91-0180
An update of the powershell package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0180. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for Improper Authentication in Microsoft
CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center...
MAL-2026-13630 Malicious code in @rbx-ts/services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476bbe7c2ce12348142e93deffe53c9d4d6dfef3400030af81cff902bac5935 This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. Its postinstall script...
How to Apply Custom Settings in Veeam Backup for Microsoft 365 Using Set-VBOConfigurationParameter
Purpose This article explains how to use the Set-VBOConfigurationParameter cmdlet to apply a custom configuration setting within a Veeam Backup for Microsoft 365 deployment. Solution How the Scripts in This Article Are Used Every script in this article begins with the same three variables, which...
CVE-2026-71312
A flaw was found in rclone, a command-line program for syncing files. This vulnerability allows a remote attacker to execute arbitrary commands on the server when processing SFTP paths. By crafting a malicious filename that uses specific Unicode single-quote characters, an attacker can bypass...