PT-2026-2721

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A heap-based buffer overflow exists within the Windows Virtualization-Based Security VBS Enclave component. This condition allows a locally authorize...

PT-2026-2685

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description An out-of-bounds read exists in the Capability Access Management Service camsvc. A local attacker who is authorized can exploit this to disclose informatio...

PT-2026-2696

CVE-2026-20849 Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network. https://t.co/YLkUwVtaPa...

PT-2026-2681

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Ancillary Function Driver for WinSock. This condition allows a locally authorized...

PT-2026-2683

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description The use of a broken or risky cryptographic algorithm in Windows Kerberos can allow an authorized attacker to disclose information locally. This issue allows attackers to obtain...

PT-2026-2758

CVE-2026-20959 Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing … https://t.co/MJ9l4ETY51...

PT-2026-2718

CVE-2026-20873 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/VZ7C3660ds...

ServiceNow AI Platform 安全漏洞

ServiceNow AI Platform is an AI intelligence platform from ServiceNow, Inc. in the United States. ServiceNow AI Platform has a security vulnerability that originates from an unauthenticated user being able to impersonate another user and perform actions that they are authorized to perform...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed PoC CVE-2025-14847 Ethical Disclosure & Discl...

CVE-2023-25196

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache Fineract. Authorized users may be able to change or add data in certain components. This issue affects Apache Fineract: from 1.4 through 1.8.2...

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2021-0170

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0001

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

CVE-2025-23291

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2019-18884

index.php/teammembers/addteammember in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users...

CVE-2020-10187

Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply needs to request the list of their...

CVE-2022-42287

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...

CVE-2022-31075

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, EdgeCore may be susceptible to a DoS attack on CloudHub if an attacker was to send a well-crafted HTTP request to /edge.crt. I...

CVE-2024-41962

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...

CVE-2025-23293

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure...