Azure Application Gateway Elevation of Privilege Vulnerability

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...

Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...

Azure Bastion Elevation of Privilege Vulnerability

...

Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

Azure Application Gateway Elevation of Privilege Vulnerability

Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...

PT-2025-47642

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Online affected versions not specified Description The software contains an elevation of privilege flaw that could allow remote attackers to gain administrative control through unsafe deserialization. The flaw allows...

PT-2025-47641

Name of the Vulnerable Software and Affected Versions Azure Bastion versions prior to November 20, 2025 Description A critical elevation of privilege flaw impacts Azure Bastion. Attackers can potentially gain higher permissions through capture-replay attacks if the system is unpatched. This allow...

Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code issue...

PT-2025-47652

Name of the Vulnerable Software and Affected Versions Azure Application Gateway affected versions not specified Description A stack-based buffer overflow exists in Azure Application Gateway. This allows an unauthorized attacker to elevate privileges over a network. The issue requires no...

TencentOS Server 3: .NET 6.0 (TSSA-2023:0179)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0179 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Microsoft Azure Monitor 代码问题漏洞

Microsoft Azure Monitor is a newer observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A code issue vulnerability exists in Microsoft Azure Monitor that stems from an elevation of privilege vulnerability...

PT-2025-47643

Azure Monitor Elevation of Privilege Vulnerability...

Microsoft Application Gateway 缓冲区错误漏洞

Microsoft Application Gateway is an application gateway from Microsoft Corporation in the United States. An elevation of privilege vulnerability exists in Microsoft Application Gateway, which can be exploited by an attacker to elevate privileges...

Microsoft Azure Bastion 安全漏洞

Microsoft Azure Bastion is a hosted PaaS service from Microsoft Corporation, USA. A security vulnerability exists in Microsoft Azure Bastion that stems from elevation of privilege...

PT-2025-47651

Name of the Vulnerable Software and Affected Versions Application Gateway versions 9.4 through 9.8 Description An out-of-bounds read issue exists in Application Gateway, potentially allowing an unauthorized attacker to elevate privileges over a network. The issue enables an attacker to escalate...

CVE-2025-34334

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in the fax test functionality implemented by AudioCodesfiles/TestFax.php. When a fax "send" test is requested, the application builds a faxsender comman...

EUVD-2025-198124

When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the LocalSystem account, resulting in...

AudioCodes Fax Server 安全漏洞

AudioCodes Fax Server is a fax server from AudioCodes Israel. A security vulnerability exists in AudioCodes Fax Server version 2.6.23 and prior versions, which originates from a writable batch script that could lead to local elevation of privilege...

CVE-2025-33183

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

NVIDIA Isaac-GR00T 代码注入漏洞

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. NVIDIA Isaac-GR00T suffers from a code injection vulnerability that stems from a code injection issue in the Python component that could lead to code execution, elevation of privilege, information disclosure, and data tampering...