CVE-2025-53839 DRACOON Branding Service vulnerable to Cross-site Scripting

DRACOON is a file sharing service, and the DRACOON Branding Service allows customers to customize their DRACOON interface with their brand. Versions of the DRACOON Branding Service prior to 2.10.0 are vulnerable to cross-site scripting. Improper neutralization of input from administrative users...

CVE-2025-53839

CVE-2025-53839 affects DRACOON Branding Service (pre-2.10.0). The vulnerability is cross-site scripting caused by improper neutralization of input from administrative users, potentially injecting HTML into the workflow for newly onboarded users. A fix was made available in version 2.10.0 and roll...

CVE-2025-53839 DRACOON Branding Service vulnerable to Cross-site Scripting

DRACOON is a file sharing service, and the DRACOON Branding Service allows customers to customize their DRACOON interface with their brand. Versions of the DRACOON Branding Service prior to 2.10.0 are vulnerable to cross-site scripting. Improper neutralization of input from administrative users...

CVE-2020-0659

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0747...

CVE-2019-1379

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1383, CVE-2019-1417...

CVE-2019-1417

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1383...

CVE-2019-1383

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1417...

Desert Dexter Targets 900 Victims Using Facebook Ads and Telegram Malware Links

The Middle East and North Africa have become the target of a new campaign that delivers a modified version of a known malware called AsyncRAT since September 2024. "The campaign, which leverages social media to distribute malware, is tied to the region's current geopolitical climate," Positive...

iBarn Security Vulnerabilities

iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which originates from a reflected cross-site scripting XSS vulnerability contained in the $search parameter on /index.php...

Threat Actors Leverage File-Sharing Service and Reverse Proxies for Credential Harvesting

We analyzed a phishing campaign involving malicious emails containing a link to a file-sharing solution, which further leads to a PDF document with a secondary link designed to steal login info and session cookies...

Unable to start the Net.Tcp Port Sharing service on the Storefront server

The Net.Tcp Port Sharing service is currently unable to start, and as a result, several Citrix services such as Citrix Subscription Store, Citrix Peer Resolution service, and Citrix Credential Wallet service are Stopped. Attempting to start the Net.Tcp Port Sharing service, an error message is...

The vulnerability of the password-reset procedure implemented by the knowledge-sharing service Answer allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the password-reset procedure implemented by the knowledge-sharing service Answer is related to deficiencies in restricting access to the password-reset code. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information...

The vulnerability of the Media Player Network Sharing Service, a service for sharing media files between operating systems running on Windows, allows attackers to enhance their privileges.

The vulnerability of the Media Player Network Sharing Service, a service for sharing media files between operating systems on Windows, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-30225

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

CVE-2022-30225

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

CVE-2022-30225

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

CVE-2022-30225 Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

...

CVE-2022-30225 Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

...

CVE-2022-30225

Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.