165401 matches found
PT-2026-109600
Name of the Vulnerable Software and Affected Versions WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION versions prior to 44.2 Description An authentication bypass exists due to an OIDC Nonce Replay flaw. The Id Token Service Deprecated::process openidconnect token function uses the wp verify...
CVE-2023-23397
CVE-2023-23397 Vulnerability Details 🚨💻 Microsoft has recently addressed a set of critical security vulnerabilities, including this zero-day exploits: CVE-2023-23397. The Common Vulnerability Scoring System CVSS assigned score of 9.8 to this exploit. CVE-2023-23397: Elevation of Privilege in...
WordPress WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin <= 44.1 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Wordfence PRISM in WordPress Plugin WPO365 versions = 44.1...
cve-2025-53779-kerberos_bypass_reproduction
CVE-2025-53779: Microsoft Windows Kerberos Authentication Bypass CVSS Score: 9.8 Critical Status: Active exploitation in the wild Disclosure: Microsoft August 2025 Patch Tuesday Zero-Day Overview CVE-2025-53779 is a critical authentication bypass vulnerability in Microsoft Windows Kerberos protoc...
windows_hardening
HardeningKitty e Windows Hardening Introduzione Il progetto è nato come una semplice lista di hardening per Windows 10. Dopo qualche tempo, è stato creato HardeningKitty per semplificare l'hardening di Windows. Ora, HardeningKitty supporta le linee guida di Microsoft, CIS Benchmarks, DoD STIG e B...
EUVD-2026-95398
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-95399
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-95397
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server Privilege Escalation
The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-88131
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network...
CVE-2026-96207
A vulnerability in Microsoft Partner Center due to improper certificate validation (CWE-295) allows an unauthorized attacker to elevate privileges over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 base score of 10.0 , indicating high impact on confidentiality and integri...
CVE-2026-88131
A critical Remote Code Execution (RCE) vulnerability exists in Microsoft Dataverse due to the deserialization of untrusted data . This flaw allows an unauthorized attacker to execute arbitrary code over the network. The vulnerability has a CVSS 3.1 score of 9.8 , indicating high impact on confide...
CVE-2026-94510
A vulnerability in Microsoft Bookings allows an unauthorized attacker to achieve elevation of privilege over a network. The root cause is an authorization bypass occurring through a user-controlled key . The impact is classified as CRITICAL , with a CVSS 3.1 base score of 9.9 , specifically affec...
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
In this article 1. Why post-quantum authentication presents a different challenge 2. Why organizations should begin preparing now 3. Microsoft's perspective on readiness 4. Testing the future certificate ecosystem 5. Expanding end-to-end testing 6. What organizations can do today 7. Looking ahead...
