PT-2025-15513 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to a use after free condition in Windows Remote Desktop Services, allowing an unauthorized attacker to execute code over a network. This enables...

Microsoft Active Directory Certificate Services 安全漏洞

Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...

PT-2025-15585 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to the use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services, allowing an authorized attacker to disclos...

Microsoft Windows Cryptographic Services 资源管理错误漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit this vulnerability to cause a denial of service on the syste...

Microsoft Windows Cryptographic Services 安全漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit the vulnerability to obtain sensitive information. The following products and...

Microsoft Windows Remote Desktop Services 安全漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A security vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker exploiting this...

PT-2025-15497 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to uncontrolled resource consumption in Windows Cryptographic Services, allowing an unauthorized attacker to deny service over a network. This ca...

CVE-2025-3353

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit...

LogonUI.exe process hanging after logoff from multi-session VDA

When utilizing multi-session VDA with the Duo Security agent installed, users may close out the applications in an attempt to log off of the VDA but the LogonUI.exe process will hang. This will result in multiple Terminal Services sessions showing active with the same session number, but no user...

PT-2025-15225 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical issue was discovered in the system, affecting an unknown part of the /admin/add-services.php file. The manipulation of the cost argument leads to SQL injection. It is...

Hotfix XS82ECU1085 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...

CVE-2025-3312

A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of the file /admin/add-customer-services.php. The manipulation of the argument sids leads to sql injection. The attack may be initiated...

RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.62 (RHSA-2025:3452)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3452 advisory. Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP...

SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2025:1142-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1142-1 advisory. - CVE-2024-45337: golang.org/x/crypto/ssh: Fixed misuse of ServerConfig.PublicKeyCallback leading to authorization bypass bsc1234563. Other...

CVE-2025-0676

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to...

PT-2025-22379 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE version 3.4 Description: A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS...

RHSA-2025:3452 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 security update

Bulletin has no description...

Out Of Memory Error

org.keycloak, keycloak-services is vulnerable to an Out Of Memory Error. The vulnerability is due to unbounded caching of JWT tokens with long expiration times, causing excessive memory consumption and potential system failure. It allows an attacker to cause a Denial of Service DoS by exhausting...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to upload arbitrary files, increase their privileges, and execute arbitrary commands.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to load arbitrary files, increase their privileges, and execute arbitrary commands...

The vulnerability of the Juniper Networks Junos OS Evolved operating system’s extraction service allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS Evolved operating system-based filtering services is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...