CVE-2025-54102

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54102

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54114 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-54114 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-54102

CVE-2025-54102 is a use-after-free in the Windows Connected Devices Platform Service that allows an authenticated, local attacker to escalate privileges (obtain increased entitlements). The connected documents corroborate the local-privilege-escalation impact (NCSC advisory lists CVE-2025-54102 w...

Malicious code in falcon-login (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99ae21b50a32d57d9c469d91755ecfa18484d7b95f0b61ccbefdf9dbcc1764e Any computer that has this package installed or running should be considered...

CVE-2025-8008

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash...

CVE-2025-7350

A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication...

CVE-2025-7350

CVE-2025-7350 maps to a Cross-Site Request Forgery that enables remote code execution in Rockwell Stratix Stratix IOS devices (5410, 5700, 8000). The vulnerability allows an unauthenticated attacker to upload and run malicious configurations, leading to RCE. Affected products are Stratix IOS on R...

CVE-2025-7350 Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability

A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication...

CVE-2025-8008

CVE-2025-8008 affects Rockwell Automation 1756-EN4TR family devices (1756-EN4TR, 1756-ENT2R, 1756-EN4TRXT) in protected mode. The issue arises when a Forward Close operation processes specially crafted messages, potentially crashing the device and impacting availability. The vulnerability is docu...

CVE-2025-8008 Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash...

CVE-2025-40594

A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...

CVE-2025-40757

Siemens APOGEE PXC Series (BACnet and P2 Ethernet) and TALON TC Series (BACnet) devices, when networked, expose unrestricted access to sensitive files and could allow downloading an encrypted .db file containing passwords. Root cause: information disclosure in affected devices. Impact: potential ...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

PT-2025-36901

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A Server-Side Request Forgery SSRF vulnerability exists in the embedded web server of Lexmark devices. An attacker can exploit this issue to make the device send an arbitrary HTTP...

Baicells多款产品 信息泄露漏洞

Baicells Nova 436Q and others are products of Baicells, Inc.Baicells Nova 436Q is an advanced dual-carrier outdoor eNodeB eNB. Baicells Nova 243 and others are products of the company.Baicells Nova 243 is a miniature base station.Baicells NEUTRINO430 is an LTE base station. An information...