CVE-2025-63208

An issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware version 5.6.0-8, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint...

CVE-2025-63208

Summary: CVE-2025-63208 affects Bridgetech VB288 Objective QoE Content Extractor (firmware 5.6.0-8). A flaw in the /probe/core/setup/passwd endpoint allows an attacker to disclose admin passwords, exposing highly sensitive data (confidentiality impact H; CVSS 3.1: HIGH, Network attack vector, no ...

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

CVE-2025-59512 Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

...

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

CVE-2025-59512 Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

...

EUVD-2025-93445

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

CVE-2025-59512

Technical details about CVE-2025-59512, including affected product, root cause, exploitability or remediation, are not publicly provided in the supplied Connected Documents. Monitor for official updates (mitigations/patches) as newer MSKBs may cover this CVE.

Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

PT-2025-46462

Name of the Vulnerable Software and Affected Versions Customer Experience Improvement Program CEIP affected versions not specified Description An improper access control issue exists within the Customer Experience Improvement Program CEIP. This allows a local attacker who is already authorized to...

KLA90057 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, read local files, cause denial of service. Below is a...

MAL-2025-49576 Malicious code in hiro-experience-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4354fbcce18783cfcf619d78e5e9ef34cdd70bfd398b9c88117979700ea2cc3d The package hiro-experience-map was found to contain malicious code...

EUVD-2025-38717

Malicious code in hiro-experience-map npm...

Malicious code in hiro-experience-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4354fbcce18783cfcf619d78e5e9ef34cdd70bfd398b9c88117979700ea2cc3d The package hiro-experience-map was found to contain malicious code...

Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce

PoC exploit for CVE-2025-53690, a vulnerability in a .NET framew...

Malicious Package

Overview pc-experience-fe-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-37542

Malicious code in experience-manager-apis npm...

Malicious code in pc-experience-fe-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8257ed048a6a07820b94cb55bada5ee260ab483c75647da8c506236aa890e7e5 The package pc-experience-fe-components was found to contain malicious code. Source: ghsa-malware...