Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

June 10, 2025—Hotpatch KB5060525 (OS Build 20348.3745)

None None...

Windows Schannel Remote Code Execution Vulnerability

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network...

PT-2025-24824 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: A missing release of memory after its effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network. The...

PT-2025-24825

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description The issue is related to a use after free condition in Windows Remote Desktop Services, which enables an unauthorized attacker to execute code over a network...

HPESBHF04880 rev.1 - HPE StoreEasy Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-01209 - Intel PTT and SPS Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Storage File Controller - Prior to SPSE504.01.05.105 U32 ROM Family HPE Storage Performance File Controller - Prior to SPSE504.01.05.105 U32 ROM Family HPE StoreEasy 1460...

PT-2025-24678 · Unknown · Energy Services

Name of the Vulnerable Software and Affected Versions: Energy Services versions with G5DFR Description: A vulnerability has been identified in Energy Services where affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of the G5DFR component and...

Siemens Energy Services 安全漏洞

Siemens Energy Services is an energy management system from Siemens Canada. A security vulnerability exists in Siemens Energy Services that stems from the G5DFR component containing default credentials that could lead to controlling the G5DFR component and tampering with device output...

Microsoft Windows Cryptographic Services 安全漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could remotely execute code. The following products and...

Microsoft Windows Remote Desktop Services 资源管理错误漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker exploiti...

HPESBHF04874 rev.1 - HPE DL/ML, MicroServer, Synergy, Apollo, XL and Edgeline Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-01209 - Intel PTT and SPS Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to SPSE504.04.04.702 HPE ProLiant DL360 Gen10 Plus server - Prior to SPSE504.04.04.702 HPE ProLiant DL380 Gen10 Plus server -...

Siemens Energy Services

SUMMARY Siemens Energy Services previously known as Managed Applications and Services, sell solutions using Elspec G5 Digital Fault Recorder which contains default credentials with admin privileges. A client configuration with remote access could allow an attacker to gain remote control of the...

CVE-2025-0037

The CVE-2025-0037 issue affects AMD Versal Adaptive SoC devices, arising from lack of address validation when PLM runtime services are executed via the PLM firmware. This could allow a remote processor to access isolated or protected memory spaces, compromising confidentiality and integrity (impa...

CVE-2025-0037

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...

Important: Red Hat Security Advisory: perl-FCGI:0.78 security update

An update for the perl-FCGI:0.78 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Minoritised Ethnic People'S Security and Privacy Concerns and Responses Towards Essential Online Services

Minoritised ethnic people are marginalised in society, and therefore at a higher risk of adverse online harms, including those arising from the loss of security and privacy of personal data. Despite this, there has been very little research focused on minoritised ethnic people's security and...

CVE-2025-30997

Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...

CVE-2025-5759

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This vulnerability affects unknown code of the file /admin/edit-person-detail.php?editid=2. The manipulation of the argument editid leads to sql injection. The attack can be initiate...

CVE-2025-20261

A vulnerability in the SSH connection handling of Cisco Integrated Management Controller IMC for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated privileges. This vulnerability is due t...

CVE-2025-20130

A vulnerability in the API of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy...