10627 matches found
PT-2025-10070
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the gadget workqueue not being properly cleaned up after device removal. This can lead to new work being scheduled in the...
CVE-2025-21420
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...
The vulnerability of the QuartzCore component in operating systems such as MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS allows a hacker to trigger a service failure.
The vulnerability of the QuartzCore component in operating systems such as MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser allows attackers to execute arbitrary commands.
The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
WordPress plugin Puzzles 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
The vulnerability of the CoreAudio component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a hacker to trigger a service failure.
The vulnerability of the CoreAudio component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
WordPress plugin ProfilePress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin DethemeKit For Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
The vulnerability of the Image Handler component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows a hacker to trigger a service failure.
The vulnerability of the Image Handler component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
CLSA-2025-1739386415 bind: Fix of 3 CVEs
CVE-2023-5517: fix a flaw causing named to crash with an assertion failure when nxdomain-redirect is set, and a PTR query for an RFC 1918 address returns NXDOMAIN - CVE-2023-5679: fix a crash in named due to an assertion failure during recursive resolution when both DNS64 and serve-stale are...
WordPress plugin Welcart e-Commerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin NGG Smart Image Search 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Liveticker (by stklcode) 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS. - Obtaining elevated privileges - Circumvention of security measure - Spoofing - Execution of...
CVE-2025-21420
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...
CVE-2025-21420
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...
CVE-2025-21420
CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...
CVE-2025-21420 Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
...
