CVE-2025-14884: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Performing manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. This...

D-Link DIR-605 命令注入漏洞

The D-Link DIR-605 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DIR-605 version 202WWB03, which stems from a command injection in the firmware update service component...

PT-2025-52269

Name of the Vulnerable Software and Affected Versions D-Link DIR-605 version 202WWB03 Description A flaw exists in the Firmware Update Service component of the device, allowing for command injection. This issue can be exploited remotely. The exploit is publicly available. This vulnerability affec...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Metasploit Wrap-Up 11/14/2025

It has “SUS” in the name, what did you expect? This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service WSUS vulnerability that allows for SYSTEM level remote code execution. Documented among the multiple recent zero-days in Windows, the...

GHSA-4C3J-3H7V-22Q9 changedetection.io: Stored XSS in Watch update via API

Summary A Stored Cross Site Scripting is present in the changedetection.io Watch update API due to unsufficient security checks. Details Tested on changedetection.io version v0.50.24 console REPOSITORY TAG IMAGE ID CREATED SIZE ghcr.io/dgtlmoon/changedetection.io latest 0367276509a0 23 hours ago...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

The vulnerability of the Windows Update Service affects Microsoft Windows operating systems, allowing attackers to exploit their privileges.

The vulnerability of the Windows Update Service in Microsoft Windows operating systems is related to an incorrect interpretation of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Exploit for Deserialization of Untrusted Data in Microsoft

cve-2025-59287-exploit-poc CVE-2025-59287 is a critica...

The Bug Report - October 2025 Edition

The Bug Report – October 2025 Edition By Jonathan Omakun · October 31, 2025 Why am I here? Welcome to October's cybersecurity horror show, where the tricks are malicious and the treats are... Well, there aren't any treats. Just vulnerabilities that would make even the most seasoned security...

CVE-2025-60320

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

CVE-2025-60320

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

Microsoft Releases Out-of-Band Security Update to Mitigate Windows Server Update Service Vulnerability, CVE-2025-59287

Updated October 29, 2025 : CISA has updated this Alert to include revised information on vulnerable product identification, potential threat activity detections, and additional resources. Microsoft released an update to address a critical remote code execution vulnerability impacting Windows Serv...

PT-2025-44347

Name of the Vulnerable Software and Affected Versions memoQ versions 10.1.13.ef1b2b52aae and earlier Description memoQ versions 10.1.13.ef1b2b52aae and earlier contain an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The service is installed with a path...

CVE-2025-60320

memoQ versions 10.1.13.ef1b2b52aae and earlier are vulnerable to an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The service is installed with a path containing spaces but lacks surrounding quotes, a misconfiguration that allows local users to escalate pri...

CVE-2025-60320: Unquoted Search Path or Element

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

CVE-2025-60320

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

CVE-2025-59462

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability...

CVE-2025-59462

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability...

CVE-2025-59462 Denial-of-service (DoS) via delayed or missing client response

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability...