Lucene search
+L

482 matches found

Github Security Blog
Github Security Blog
added 2025/04/23 10:25 p.m.36 views

YoutubeDLSharp allows command injection on windows system due to non sanitized arguments

Summary This vulnerability only apply when running on a Windows OS. An unsafe conversion of arguments allows the injection of a malicous commands when starting yt-dlp from a commands prompt. !CAUTION NOTE THAT DEPENDING ON THE CONTEXT AND WHERE THE LIBRARY IS USED, THIS MAY HAVE MORE SEVERE...

9.2CVSS7.6AI score0.00264EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2025/04/16 12:00 a.m.31 views

Oracle VirtualBox Security Update (Apr 2025) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

8.1CVSS7.6AI score0.00606EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.18 views

The vulnerability of the MoTw mechanism in Microsoft Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the MoTe-Web mechanism in Microsoft Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions from a remote location...

6.4CVSS7.7AI score0.0163EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2025/04/09 7:06 a.m.76 views

Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS Vulnerability

Microsoft has released security fixes to address a massive set of 126 flaws affecting its software products, including one vulnerability that it said has been actively exploited in the wild. Of the 126 vulnerabilities, 11 are rated Critical, 112 are rated Important, and two are rated Low in...

8.1CVSS8.5AI score0.48973EPSS
SaveExploits26
Krebs on Security
Krebs on Security
added 2025/04/09 3:09 a.m.34 views

Patch Tuesday, April 2025 Edition

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft's most-dire "critical" rating, meaning malware or malcontents could...

8.1CVSS8.1AI score0.13904EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2025/04/09 12:00 a.m.145 views

Microsoft Windows Multiple Vulnerabilities (KB5055519)

This host is missing an important security update according to Microsoft KB5055519 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS8.5AI score0.13904EPSS
SaveExploits8References4
OpenVAS
OpenVAS
added 2025/04/09 12:00 a.m.63 views

Microsoft Windows Multiple Vulnerabilities (KB5055518)

This host is missing an important security update according to Microsoft KB5055518 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS8.4AI score0.13904EPSS
SaveExploits6References4
OpenVAS
OpenVAS
added 2025/04/09 12:00 a.m.141 views

Microsoft Windows Multiple Vulnerabilities (KB5055521)

This host is missing an important security update according to Microsoft KB5055521 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.1AI score0.13904EPSS
SaveExploits8References4
OpenVAS
OpenVAS
added 2025/04/09 12:00 a.m.42 views

Microsoft Windows Multiple Vulnerabilities (KB5055523)

This host is missing an important security update according to Microsoft KB5055523 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.1AI score0.13904EPSS
SaveExploits8References4
OpenVAS
OpenVAS
added 2025/04/09 12:00 a.m.52 views

Microsoft Windows Multiple Vulnerabilities (KB5055528)

This host is missing an important security update according to Microsoft KB5055528 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS8.4AI score0.13904EPSS
SaveExploits6References4
NVD
NVD
added 2025/04/08 6:16 p.m.29 views

CVE-2025-29808

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

5.5CVSS0.00503EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/08 5:15 p.m.28 views

CVE-2025-27443

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

5.5CVSS0.00164EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2025/04/08 12:00 a.m.140 views

KLA82400 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of...

8.8CVSS10AI score0.13904EPSS
SaveExploits8References107
The Hacker News
The Hacker News
added 2025/04/05 3:50 p.m.59 views

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last month, painting a picture of a "conflicted" individual straddling a legitimate career in cybersecurity and pursuing cybercrime. In a new extensive...

7.8CVSS8.5AI score0.30391EPSS
SaveExploits30
OpenVAS
OpenVAS
added 2025/04/01 12:00 a.m.112 views

Microsoft Windows Multiple Vulnerabilities (KB5053598)

This host is missing an important security update according to Microsoft KB5053598 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.1AI score0.58909EPSS
SaveExploits49References3
CVE
CVE
added 2025/03/28 10:24 p.m.82 views

CVE-2025-2782

The CVE identifies a local privilege-escalation in WatchGuard Terminal Services Agent (Windows) due to improper directory-permission configuration when installed in a non-default directory. Affected versions are 12.0–12.10. The root cause is permission misconfiguration enabling an authenticated l...

6.3CVSS5.2AI score0.00148EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/03/27 12:00 a.m.32 views

Microsoft Windows Multiple Vulnerabilities (KB5051987)

This host is missing an important security update according to Microsoft KB5051987 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS6.9AI score0.24457EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2025/03/26 12:00 a.m.23 views

Microsoft Windows Multiple Vulnerabilities (KB5041571)

This host is missing an important security update according to Microsoft KB5041571 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.5AI score0.70564EPSS
SaveExploits30References3
OpenVAS
OpenVAS
added 2025/03/26 12:00 a.m.28 views

Microsoft Windows Multiple Vulnerabilities (KB5044284)

This host is missing an important security update according to Microsoft KB5044284 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.3AI score0.66695EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2025/03/26 12:00 a.m.35 views

Microsoft Windows Multiple Vulnerabilities (KB5043080)

This host is missing an important security update according to Microsoft KB5043080 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.2AI score0.54486EPSS
SaveExploits3References3
Rows per page
Query Builder