PT-2025-32820 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: A heap-based buffer overflow exists in Windows Hyper-V. This issue allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no informati...

PT-2025-30: NULL pointer dereference in Windows Ancillary Function Driver for WinSock

The Null pointer dereference vulnerability was discovered in the Windows Ancillary Function Driver for WinSock. The vulnerability allows an authorized attacker to gain SYSTEM privileges. The affected products: Windows 10 Version 1809 for x64-based & 32-bit Systems Versions to 10.0.17763.7678...

PT-2025-32783 · Microsoft · Windows Nt Rras +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: A heap-based buffer overflow exists in Windows Routing and Remote Access Service RRAS. This issue allows an authorized attacker to execute code over a...

PT-2025-32740

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. Recommendations: At the moment, there is no...

PT-2025-32849 · Microsoft · Azure Stack

Name of the Vulnerable Software and Affected Versions: Azure Stack affected versions not specified Description: An authorized attacker can disclose private personal information locally in Azure Stack. This allows exposure of this information to an unauthorized actor. Recommendations: At the momen...

PT-2025-32810

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing affected versions not specified Description: An issue exists in Windows Message Queuing related to access of a resource using an incompatible type, also known as a 'type confusion'. This allows an authorized attacker t...

PT-2025-32817 · Microsoft · Desktop Windows Manager +1

Name of the Vulnerable Software and Affected Versions: Desktop Windows Manager affected versions not specified Description: A use after free issue exists in Desktop Windows Manager that could allow an authorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-32787 · Microsoft · Windows Nt Rras +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: A heap-based buffer overflow exists in Windows Routing and Remote Access Service RRAS. This issue allows an authorized attacker to execute code over a...

PT-2025-32797 · Unknown +1 · Graphics Kernel +1

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: An issue exists in the Graphics Kernel where access of a resource using an incompatible type 'type confusion' can allow an authorized attacker to execute code locally...

PT-2025-32775 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: A race condition exists due to improper synchronization when using shared resources. This allows an authorized attacker to elevate privileges locally...

PT-2025-32809 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: A use after free issue exists in Microsoft Brokering File System that could allow an authorized attacker to elevate privileges locally. Recommendations: At the momen...

PT-2025-32814 · Microsoft · Windows Nt Rras +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The Windows Routing and Remote Access Service RRAS contains a flaw in which an authorized attacker can disclose information over a network due to the...

PT-2025-32834

Name of the Vulnerable Software and Affected Versions: Azure File Sync affected versions not specified Description: Improper access control in Azure File Sync can allow an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer...

Exploit for Code Injection in Xwiki

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC...

CVE-2025-55077 Tyler Technologies ERP Pro 9 SaaS application escape

Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed hardened remote Windows environment...

CVE-2025-20332 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An attacker could exploit this...

CVE-2025-53081

An 'Arbitrary File Creation' in Samsung DMSData Management Server allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...

PT-2025-31174 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMS Data Management Server affected versions not specified Description: An arbitrary file deletion issue exists in Samsung DMS Data Management Server. This allows attackers to delete arbitrary files from unintended locations on the...

PT-2025-31097 · Campcodes · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical vulnerability exists in Campcodes Online Recruitment Management System. The vulnerability is a SQL injection that affects an unknown functionality of the file...

CVE-2025-7822 WP Wallcreeper <= 1.6.1 - Missing Authorization to Authenticated (Susbcriber+) Cache Enable/Disable

The WP Wallcreeper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the adminnotices hook in all versions up to, and including, 1.6.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enable...