Azure File Sync Agent v18.3 Release – August 2025 (KB5063613)

Security Update for Azure File Sync agent version 18.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

2025-08 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5063709)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Azure File Sync Agent v20.1 Release – August 2025 (KB5056953)

Security Update for Azure File Sync agent version 20.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

2025-08 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5063709)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

Description of the security update for SharePoint Server 2016 Language Pack: August 12, 2025 (KB5002772)

None None...

Hotfix update for Exchange Server 2019 CU14: April 18, 2025 (KB5050673)

None None...

Azure File Sync Agent v21.2 Release – July 2025 (KB5063825)

Update Rollup for Azure File Sync agent version 21.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v21.2 Release – July 2025 (KB5063825)

Update Rollup for Azure File Sync agent version 21.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v21.2 Release – July 2025 (KB5063825)

Update Rollup for Azure File Sync agent version 21.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v21.2 Release – July 2025 (KB5063825)

Update Rollup for Azure File Sync agent version 21.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

PT-2025-111: Insufficient authorization in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to exploit incorrect authorization, obtaining information or functions beyond their privileges. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 08.08.2025...

PT-2025-113: Stored XSS in FreeScout

The vulnerability was identified in FreeScout , versions 1.8.182. The discovered vulnerability allows an attacker to embed malicious HTML and JavaScript into content generated by FreeScout, causing script execution in the user’s browser. Vulnerability status: Confirmed by vendor Date of...

CVE-2025-53544

Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...

The vulnerability of the wiki system’s function in the Atlassian Confluence platform allows attackers to carry out phishing attacks.

The vulnerability of the wiki system’s function for creating a unified knowledge base in Atlassian Confluence is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out phishing attacks by sending GET...

PiMRef: Detecting and Explaining Ever-Evolving Spear Phishing Emails with Knowledge Base Invariants

Phishing emails are a critical component of the cybercrime kill chain due to their wide reach and low cost. Their ever-evolving nature renders traditional rule-based and feature-engineered detectors ineffective in the ongoing arms race between attackers and defenders. The rise of large language...

CVE-2025-7431

The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

WordPress plugin Knowledge Base Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-29985 · WordPress · Wp Knowledgebase

Name of the Vulnerable Software and Affected Versions: Knowledge Base plugin for WordPress versions prior to 2.3.2 Description: The Knowledge Base plugin for WordPress is susceptible to Stored Cross-Site Scripting via the plugin slug setting due to insufficient input sanitization and output...

MaxKB 代码注入漏洞

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A code injection vulnerability exists in MaxKB versions prior to 2.0.0, which stems from the fact that sandbox design rules can be bypassed, potentially leading to a...

Questionnaire Mate 2.0

Questionnaire Mate is a cool script that lets you read in a list of questions and uses OpenAI to answer them based on a private knowledge base. Useful for a less informed individual to feed AI audit questions and extract proper answers...