1744 matches found
AEAS: Actionable Exploit Assessment System
Security practitioners face growing challenges in exploit assessment, as public vulnerability repositories are increasingly populated with inconsistent and low-quality exploit artifacts. Existing scoring systems, such as CVSS and EPSS, offer limited support for this task. They either rely on...
Coherence-Driven Inference for Cybersecurity
Large language models LLMs can compile weighted graphs on natural language data to enable automatic coherence-driven inference CDI relevant to red and blue team operations in cybersecurity. This represents an early application of automatic CDI that holds near- to medium-term promise for...
Microsoft Teams for Desktop < 25163.3611.3774.6315 Elevation of Privilege (July 2025)
The version of Microsoft Teams for Desktop on the remote Windows host is prior to 25163.3611.3774.6315 It is, therefore, affected by an elevation of privilege vulnerability: - Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate...
Hackers Hide RMM Installs as Fake Chrome Updates and Teams Invites
New research from Red Canary and Zscaler shows phishing lures now drop RMM tools like ITarian and Atera,…...
Linux Distros Unpatched Vulnerability : CVE-2022-21713
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle use...
CVE-2025-53971
Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint...
CVE-2025-47870 Team invite ID leaked to team admin with no member invite privileges
Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fail to sanitize the team invite ID in the POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id...
Linux Distros Unpatched Vulnerability : CVE-2025-3580
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. Thi...
Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
The threat actor known as EncryptHub is continuing to exploit a now-patched security flaw impacting Microsoft Windows to deliver malicious payloads. Trustwave SpiderLabs said it recently observed an EncryptHub campaign that brings together social engineering and the exploitation of a vulnerabilit...
Microsoft Teams for Desktop < 25122.1415.3698.6812 Remote Code Execution (August 2025)
The version of Microsoft Teams for Desktop on the remote Windows host is prior to 25122.1415.3698.6812 It is, therefore, affected by a remote code execution vulnerability: - Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. CVE-2025-5378...
Malicious code in vk-teams-bridge (npm)
The package vk-teams-bridge was found to contain malicious code...
MAL-2025-38523 Malicious code in vk-teams-bridge (npm)
The package vk-teams-bridge was found to contain malicious code...
CVE-2025-53783
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network...
Microsoft Teams Real Time Media Manager Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Teams. Authentication is not required to exploit this vulnerability. The specific flaw exists within the real time media manager. The issue results from the lack of proper validation of...
CVE-2025-53783
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network...
CVE-2025-53783
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network...
CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability
...
CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability
...
CVE-2025-53783
CVE-2025-53783 is a heap-based buffer overflow in Microsoft Teams that enables remote code execution over a network. Public documents consistently identify the affected component as Microsoft Teams (notably the desktop client) and describe the underlying flaw as a heap-based overflow that allows ...
