CVE-2025-27491 Windows Hyper-V Remote Code Execution Vulnerability

...

CVE-2025-26671 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-26648 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-29792 Microsoft Office Elevation of Privilege Vulnerability

...

2025-04 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5055518)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

Siemens Industrial Edge Device Kit

SUMMARY Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings...

Siemens License Server (SLS)

SUMMARY Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server SLS and recommends to update to the latest version...

Ubuntu: Security Advisory (USN-7421-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7413-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-30356

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in...

Student-Homework-Management-System 安全漏洞

Student-Homework-Management-System is a student homework management system developed by itning individual developers using SSM+Shiro. A security vulnerability exists in Student-Homework-Management-System 1.2.7 and earlier versions, which is caused by cross-site request forgery...

Dell Unity OS Command Injection Vulnerability (CNVD-2025-06612)

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

Ubuntu: Security Advisory (USN-7407-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-21989

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix missing .istwopixelspercontainer Starting from 6.11, AMDGPU driver, while being loaded with amdgpu.dc=1, due to lack of .istwopixelspercontainer function in dce60tgfuncs, causes a NULL pointer dereference on...

MAL-2025-3048 Malicious code in @hongfangze/obtain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e4b6cae0530d0f1893a65496fffb1884b47ffc2ef4a507d11fd9c6370baa833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3047 Malicious code in @hongfangze/network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cbb819a2b8b08d5618ea2d98b1f5be84db8ca160526fc34340e2b52b0409efe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple MacOSX Security Update (HT122375)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7403-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7403-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

CVE-2025-24282

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system...

CVE-2025-24261

The CVE-2025-24261 affects macOS components and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The issue stems from insufficient checks that could allow an app to modify protected parts of the file system. According to the cited sources, the remediation is an updat...