277 matches found
EUVD-2024-23489
Malicious code in bioql PyPI...
EUVD-2024-43928
Malicious code in bioql PyPI...
EUVD-2023-40388
Malicious code in bioql PyPI...
Exploit for Stack-based Buffer Overflow in Microsoft
CV...
Exploit for Use After Free in Microsoft
CVE Analysis & Detection — PoCs, Snort Detection, and Mitigati...
Qemu-kvm: information leak in virtio devices
...
Backticks not treated as string delimiters in html/template
...
Exploit for External Control of File Name or Path in Microsoft
CVE-2025-33053 POC Exploit Overview The working director...
CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49677 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...
Windows Graphics Component Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally...
XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks
Cybersecurity researchers have uncovered a Go-based malware called XDigo that has been used in attacks targeting Eastern European governmental entities in March 2025. The attack chains are said to have leveraged a collection of Windows shortcut LNK files as part of a multi-stage procedure to depl...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2025-16693)
Microsoft SharePoint Server is a groupware for Windows Server made by Microsoft that provides basic portal and corporate intranet functionality. A remote code execution vulnerability exists in Microsoft SharePoint Server, which can be exploited by an attacker to execute arbitrary code on the syst...
M365 Copilot Information Disclosure Vulnerability
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network...
Microsoft Local Security Authority Server 访问控制错误漏洞
Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit this vulnerability to cause a denial of service on the system. The...
OneDrive File Picker Flaw Gives Apps Full Access to User Drives
A recent investigation by cybersecurity researchers at Oasis Security has revealed a data overreach in how Microsoft’s OneDrive…...
CVE-2019-1380
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...
CVE-2019-1447
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1445...