ABB多款产品 安全漏洞

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

ABB Cylon Aspect Studio 3.08.03 Insecure Permissions

Summary ABB Cylon ASPECT Studio is a graphical programming tool and integrated development environment IDE for ABB Cylon ASPECT products. It's used to engineer comprehensive area control and graphical user interface GUI solutions, containing a library of logical and graphical widgets. It allows...

May “In the Trend of VM” (#15): vulnerabilities in Microsoft Windows and the Erlang/OTP framework

May "In the Trend of VM" 15: vulnerabilities in Microsoft Windows and the Erlang/OTP framework. A traditional monthly vulnerability roundup. Post on Habr rus Digest on the PT website rus A total of 4 trending vulnerabilities: Elevation of Privilege - Windows Common Log File System Driver...

HYPR Passwordless 安全漏洞

HYPR Passwordless is an identity security solution from HYPR. A security vulnerability exists in HYPR Passwordless versions prior to 10.1, which stems from improper link resolution prior to file access and could lead to elevation of privilege...

Dell PowerScale InsightIQ Elevation of Privilege Vulnerability

Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool from Dell, Inc. An elevation of privilege vulnerability exists in Dell PowerScale InsightIQ that stems from improper privilege management and can be exploited by an attacker to cause an elevation of privilege...

WordPress plugin GDPR CCPA Compliance Support 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

CVE-2025-47161

Microsoft Defender for Endpoint Elevation of Privilege Vulnerability...

IBM i 安全漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i that stems from improper command line access, which could lead to elevation of privilege...

Ivanti Endpoint Manager Cloud Services Appliance < 5.0.5 Privilege elevation

The version of Ivanti Endpoint Manager Cloud Services Appliance running on the remote host is prior to 5.0.5. It is, therefore, affected by by a local privilege elevation vulnerabilitity where Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticat...

CVE-2025-47161

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

CVE-2025-47161

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

CVE-2025-47161 Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

...

CVE-2025-47161 Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

...

CVE-2025-47161

CVE-2025-47161 affects Microsoft Defender for Endpoint for Linux. The vulnerability is described as improper access control enabling local privilege escalation by an authorized attacker. Connected sources document a PoC/exploit framework for this elevation of privilege and reference affected Linu...

CVE-2025-30475

Dell PowerScale InsightIQ vulnerable: versions 5.0–5.2 suffer improper privilege management that allows an unauthenticated, remote attacker to achieve elevated privileges. The issue, described across multiple sources (Dell advisory DSA-2025-186 and RH/CNVD-type entries), is a privilege-escalation...

CVE-2025-29841

Concurrent execution using shared resource with improper synchronization 'race condition' in Universal Print Management Service allows an authorized attacker to elevate privileges locally...

Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome that stems from an unspecified incorrect handle being provided, which could lead to information disclosure, elevation of privilege...

Dell PowerScale InsightIQ 安全漏洞

Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool from Dell, Inc. An elevation of privilege vulnerability exists in Dell PowerScale InsightIQ that stems from improper privilege management and can be exploited by an attacker to cause an elevation of privilege...

PT-2025-21360 · Microsoft · Defender For Endpoint

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Endpoint affected versions not specified Description: The issue concerns an elevation of privilege in Microsoft Defender for Endpoint. No specific details about the technical aspects of the issue, such as API endpoints,...