37643 matches found
Adobe Commerce 访问控制错误漏洞
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe USA. An access control error vulnerability exists in Adobe Commerce that stems from an improper access control issue that could result in elevation of privilege. The following versions are affected:...
PT-2025-24826 · Microsoft · Windows Win32K +1
Name of the Vulnerable Software and Affected Versions: Windows Win32K affected versions not specified Description: The issue is related to a use after free condition in the Windows Win32K - GRFX component, which allows an authorized attacker to elevate privileges locally. Recommendations: At the...
PT-2025-24852 · Microsoft · Windows Kernel +1
Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to improper privilege management in the Windows Kernel, allowing an unauthorized attacker to elevate privileges locally. Recommendations: At the moment, there is...
PT-2025-24855 · Microsoft · Windows Netlogon +1
Name of the Vulnerable Software and Affected Versions: Windows Netlogon affected versions not specified Description: The issue is related to the use of an uninitialized resource in Windows Netlogon, allowing an unauthorized attacker to elevate privileges over a network. Recommendations: At the...
Apache CloudStack 安全漏洞
Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. An authorization issue vulnerability exists in Apache CloudStack...
KB5061036: Windows Server 2008 R2 Security Update (June 2025)
The remote Windows host is missing security update 5061036. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-33066 - Improper access contro...
KB5060999: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (June 2025)
The remote Windows host is missing security update 5060999. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-33066 - Improper access contro...
Fortinet多款产品 安全漏洞
Fortinet FortiOS and others are products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform. Fortinet FortiWeb is a web application layer firewall, Fortinet FortiProxy is a secure web proxy that protects employees from cyberattac...
KLA84761 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in .NET and Visual Studio can be exploited remotely...
PT-2025-24877
Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to improper privilege management, allowing an authorized attacker to elevate privileges locally. There is no information provided about...
Microsoft AutoUpdate for Mac 输入验证错误漏洞
Microsoft AutoUpdate for Mac is a Microsoft product auto-update application for the Mac platform from Microsoft Corporation USA. Microsoft AutoUpdate for Mac suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...
KLA84760 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...
Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege
!/usr/bin/env python3 Exploit Title: Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege Author: Mohammed Idrees Banyamer Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-06-06 Tested on: Windows 11 Version 24H2 for x64-based Systems...
WordPress plugin CryptoCloud - Crypto Payment Gateway 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An elevation of privilege vulnerability exists in the WordPress CryptoCloud - Crypto Payment Gateway plugin, which stems from improperly configured access control, for which no...
Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 安全漏洞
The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A security vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 that stems from a post-authentication command injection of the AT+MFMAC command, which could lead to...
Action1 代码问题漏洞
Action1 is a patch management software from Action1, Inc. Action1 suffers from a code issue vulnerability that stems from an insecure OpenSSL configuration file loading location that could lead to local elevation of privilege...
Tenable Network Monitor Elevation of Privilege Vulnerability
Tenable Network Monitor is an open source system vulnerability scanner developed by Tenable Inc. in the United States, mainly used for network vulnerability scanning and security assessment. Tenable Network Monitor suffers from an elevation of privilege vulnerability, which stems from improperly...
2BrightSparks SyncBackFree 后置链接漏洞
2BrightSparks SyncBackFree is a file backup software from 2BrightSparks Singapore. 2BrightSparks SyncBackFree suffers from a backlink vulnerability that stems from a link-following issue with the Mirror feature, which could lead to local elevation of privilege...
WordPress plugin WP-Recall 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...
