1382 matches found
Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
Titles: Microsoft Edge Renderer Process Mojo IPC 134.0.6998.177 - Sandbox Escape Author: nu11secur1ty Date: 08/07/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/software-download/windows11 Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49730...
Microsoft Windows 11 for ARM 安全漏洞
Microsoft Windows 11 for ARM is a suite of operating systems from Microsoft Corporation USA for use in ARM architecture personal computers. A security vulnerability exists in Microsoft Windows 11 for ARM that stems from DLL hijacking could lead to code execution...
Microsoft Remote Desktop Client 安全漏洞
Microsoft Remote Desktop Client is a remote desktop client from Microsoft USA. A security vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected:Windows 11 Version 22H2 for...
Microsoft Windows Update 后置链接漏洞
Microsoft Windows Update is a program update service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Update. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...
July 8, 2025-KB5056580 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2
None None...
Microsoft Windows SSDP 资源管理错误漏洞
Microsoft Windows SSDP is a simple service discovery provider program from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows SSDP. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...
Microsoft Hyper-V 输入验证错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...
Microsoft Windows Media 资源管理错误漏洞
Microsoft Windows Media is a family of media playback and management software from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Media. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are...
Microsoft Windows Kernel 安全漏洞
Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affected: Windows...
📄 McAfee Agent 5.7.6 Insecure Storage
This script demonstrates the vulnerability in McAfee's Trellix Agent Database where attackers can retrieve and decrypt credentials from the ma.db database file. Version 5.7.6 is affected. Exploit Title: McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information Date: 24 June 2025 Exploit...
June 26, 2025—KB5060826 (OS Builds 22621.5549 and 22631.5549) Preview
None None...
📄 Microsoft Windows 11 SMB Client Privilege Escalation / Remote Code Execution
This proof of concept demonstrates a complex attack chain exploiting improper access control in Windows SMB clients, leading to elevation of privilege through DNS record injection, NTLM relay attacks using impacket-ntlmrelayx, and coercion of a victim system including Windows 11 to authenticate t...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected:Window...
Microsoft Windows Hello 信息泄露漏洞
Microsoft Windows Hello is a biometric-based login from Microsoft Corporation USA that allows you to sign in using your face, fingerprint or PIN. An information disclosure vulnerability exists in Microsoft Windows Hello. The following products and versions are affected: Windows 11 Version 22H2 fo...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are...
Microsoft DWM Core Library 安全漏洞
Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation, USA. A security vulnerability exists in Microsoft DWM Core Library. An attacker could exploit this vulnerability to obtain sensitive information. The following products and editions are affected:Windows...
Microsoft Windows 数据伪造问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A data forgery vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass certain functionality. The following products and versions are...
📄 RAD FT Dell Firmware A00-00 Privilege Escalation
RAD FT Firmware versions A00-00 Build WP0000051154 and prior are susceptible to a privilege escalation vulnerability due to a failure to properly filter the user-supplied input through the .NET Profiler. Exploit name: RAD FT Dell Firmware Download link:...
📄 SDiagnostics 10.0.22621.3527 UAC Bypass
SDiagnostics versions 10.0.22621.3527 and below suffer from a UAC bypass vulnerability. Exploit name: UAC Bypass SDiagnostic.exe Troubleshooter Exploit author: Juan Sacco https://exploitpack.com Description: SDiagnostics version 10.0.22621.3527 and prior is vulnerable to an UAC User Account Contr...