CVE-2024-12427

creationtimestamp| type| source ---|---|--- 2025-01-16 09:44:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113837386587970746 2025-01-16 09:55:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1927 2025-01-16 10:15:43+00:00| seen|...

The vulnerability of the Active Directory Domain Services service on the Windows operating system allows a perpetrator to elevate their privileges to a system-level level.

The vulnerability of the Active Directory Domain Services service on the Windows operating system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to a system-level level...

PT-2025-3854 · Splunk · Splunk Supporting Add-On For Active Directory

Name of the Vulnerable Software and Affected Versions: Splunk Supporting Add-on for Active Directory versions 3.1.0 and earlier Description: A vulnerable regular expression pattern in the Splunk Supporting Add-on for Active Directory could lead to a Regular Expression Denial of Service ReDoS...

CVE-2024-55893 TYPO3 Cross-Site Request Forgery in Log Module

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2024-55920 Cross-Site Request Forgery in Dashboard Module in TYPO3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2024-55923 Cross-Site Request Forgery in Indexed Search Module in TYPO3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2024-55923 Cross-Site Request Forgery in Indexed Search Module in TYPO3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2025-21293

Active Directory Domain Services Elevation of Privilege Vulnerability...

CVE-2025-21293

Active Directory Domain Services Elevation of Privilege Vulnerability...

CVE-2025-21193

Active Directory Federation Server Spoofing Vulnerability...

CVE-2025-21193 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2025-21193

CVE-2025-21193 concerns Active Directory Federation Services (AD FS) spoofing. The connected documents identify the vulnerability as enabling a malicious actor to impersonate another user via AD FS, with a CVSS v3.1 base score of 6.5 (Network attack, short of user interaction, high confidentialit...

CVE-2025-21193 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2025-21293 Active Directory Domain Services Elevation of Privilege Vulnerability

...

CVE-2025-21293

CVE-2025-21293 — Active Directory Domain Services Elevation of Privilege. The vulnerability affects Active Directory Domain Services and enables an attacker to obtain elevated privileges via network access, with a CVSS v3.1 base score of 8.8 (High) and impact on confidentiality, integrity, and av...

CVE-2025-21293 Active Directory Domain Services Elevation of Privilege Vulnerability

...

TYPO3 Cross-Site Request Forgery in Backend User Module

Problem A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP...

Active Directory Domain Services Elevation of Privilege Vulnerability

...

Active Directory Federation Server Spoofing Vulnerability

...

CVE-2025-0069

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...