29421 matches found
D-Link DIR-816 A2 /goform/form2AddVrtsrv.cgi Access Control Error Vulnerability
The D-Link DIR-816 is a wireless router from China's AUO D-Link. An access control error vulnerability exists in D-Link DIR-816 A2 version 1.10CNB05R1B011D88210, which stems from improper access control in /goform/form2AddVrtsrv.cgi. An attacker can exploit this vulnerability to be able to set up...
D-Link DIR-816 安全漏洞
The D-Link DIR-816A2 is a router from China's AUO D-Link. The D-Link DIR-816A2 suffers from an Access Control Error vulnerability that stems from improper access control of the form2alg.cgi component, which can be exploited by an unauthenticated attacker to set up agl services via a specially...
VMware Aria Automation SSRF (VMSA-2025-0001)
The VMware Aria Automation application running on the remote host is affected by a vulnerability as referenced in the VMSA-2025-0001 advisory. - VMware Aria Automation contains a server-side request forgery SSRF vulnerability. A malicious actor with 'Organization Member' access to Aria Automation...
The vulnerability of the Active Directory Domain Services service on the Windows operating system allows a perpetrator to elevate their privileges to a system-level level.
The vulnerability of the Active Directory Domain Services service on the Windows operating system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to a system-level level...
CVE-2025-0500
creationtimestamp| type| source ---|---|--- 2025-01-15 19:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsi3evqzb2h 2025-01-15 19:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfsk5jn72q2k 2025-01-15 20:59:21+00:00| seen|...
SUSE CVE-2025-23222
An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as root. Specifically, dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods in the actual D-Bus services, and the actual D-Bus servic...
PT-2025-4382
Name of the Vulnerable Software and Affected Versions Sentry versions prior to 25.1.0 Description A critical issue was discovered in the SAML SSO implementation of Sentry, allowing an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on th...
CVE-2025-21330
Windows Remote Desktop Services Denial of Service Vulnerability...
CVE-2025-21309
Windows Remote Desktop Services Remote Code Execution Vulnerability...
CVE-2025-21309
Windows Remote Desktop Services Remote Code Execution Vulnerability...
CVE-2025-21293
Active Directory Domain Services Elevation of Privilege Vulnerability...
CVE-2025-21193
Active Directory Federation Server Spoofing Vulnerability...
CVE-2025-21330 Windows Remote Desktop Services Denial of Service Vulnerability
...
CVE-2025-21309
CVE-2025-21309 is a Windows Remote Desktop Services remote code execution vulnerability. The CVE entry indicates a NETWORK, HIGH-severity issue (CVSS v3.1: 8.1) affecting Windows Remote Desktop Services; no root-cause or affected version details are provided in the documents. Connected sources co...
CVE-2025-21309 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2025-21297 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2025-21297
CVE-2025-21297 is a Windows Remote Desktop Services remote code execution vulnerability with CVSS v3.1 base score 8.1 (HIGH). The initial document indicates a network attack vector with no user interaction and high impact on confidentiality, integrity, and availability. Connected sources confirm ...
CVE-2025-21297 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions
The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion in cryptocurrency, dwarfing the now-defunct Hydra to become the largest online illicit marketplace to have ever operated. The figures, released by blockchain analytics...
