CVE-2025-58778

Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...

Ilevia EVE X1 Server 安全漏洞

Ilevia EVE X1 Server is a smart home and building automation from Ilevia, Italy. A security vulnerability exists in Ilevia EVE X1 Server version 4.7.18.0.eden and prior versions, which stems from the use of default credentials and could lead to unauthorized remote access...

CVE-2025-61330

CVE-2025-61330 affects H3C Magic-branded devices. The root cause is a hard-coded weak password (or no password) for the root account in /etc/shadow, with Telnet enabled by default or user-enabled, and Virtual Servers exposing devices to the public network. This enables remote attacker access to r...

CVE-2025-58717

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-59230

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-59268

On BIG-IP, CVE-2025-59268 affects the Configuration utility: undisclosed endpoints that serve static non-sensitive information are reachable by an unauthenticated remote attacker, resulting in potential information disclosure. The issue is a control-plane exposure with no data-plane impact report...

Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped

Microsoft on Tuesday released fixes for a whopping 183 security flaws spanning its products, including three vulnerabilities that have come under active exploitation in the wild, as the tech giant officially ended support for its Windows 10 operating system unless the PCs are enrolled in the...

Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped

Microsoft on Tuesday released fixes for a whopping 183 security flaws spanning its products, including three vulnerabilities that have come under active exploitation in the wild, as the tech giant officially ended support for its Windows 10 operating system unless the PCs are enrolled in the...

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, is related to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Patch Tuesday for October 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for October 2025, addressing 175 Microsoft CVEs and 21 non-Microsoft CVEs. Among these, 17 vulnerabilities are considered critical and 11 are flagged as important and considered more likely to be exploited. Current intelligence shows that three o...

EUVD-2025-34404

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-59230

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-59230

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-58717

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-59230

CVE-2025-59230 describes an improper access control flaw in the Windows Remote Access Connection Manager (RasMan). The vulnerability allows an authenticated local user to elevate privileges to SYSTEM by manipulating RasMan’s IPC handling/ACLs, as reported in multiple sources. Exploitation activit...

CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2025-58717 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-55700 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-55700

CVE-2025-55700 describes an out-of-bounds read in Windows Routing and Remote Access Service (RRAS) that enables an unauthenticated attacker to disclose information over the network. The Connected documents include a matching description (EUVD-2025-34409) but do not provide concrete technical deta...