146248 matches found
PT-2026-30364
Microsoft FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search...
PT-2026-30363
Microsoft One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar to trigger an unhandled...
PT-2026-30360
Microsoft Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the search interface. Attackers can paste a buffer of 2100 characters into the top right search bar to trigger an unhandled exception...
Automating Cloud Security and Forensics through a Secure-By-Design Generative AI Framework
As cloud environments become increasingly complex, cybersecurity and forensic investigations must evolve to meet emerging threats. Large Language Models LLMs have shown promise in automating log analysis and reasoning tasks, yet they remain vulnerable to prompt injection attacks and lack forensic...
PT-2026-30366
Microsoft 7 Tik 1.0.1.0 contains a denial of service vulnerability that allows attackers to crash the application by submitting excessively long input strings to the search functionality. Attackers can paste a buffer of 7700 characters into the search bar to trigger an application crash...
EUVD-2026-18812
Microsoft Bing Elevation of Privilege Vulnerability...
CVE-2026-32186
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-32186 Microsoft Bing Elevation of Privilege Vulnerability
...
CVE-2026-32186
The provided connected feeds confirm CVE-2026-32186 is a Server-Side Request Forgery (SSRF) affecting Microsoft Bing, enabling an unauthenticated attacker to achieve privilege escalation over a network. Affected product: Microsoft Bing. The root concern is SSRF leading to elevation of privileges;...
CVE-2026-32186 Microsoft Bing Elevation of Privilege Vulnerability
...
CVE-2026-32186
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network...
Denial of Service (DoS)
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Denial of Service DoS via the MS Teams webhook process. An attacker can cause resource exhaustion by sending unauthenticated requests that are parsed before proper JWT validation. Details...
Denial of Service (DoS)
Overview @openclaw/msteams is an OpenClaw Microsoft Teams channel plugin Affected versions of this package are vulnerable to Denial of Service DoS via the MS Teams webhook process. An attacker can cause resource exhaustion by sending unauthenticated requests that are parsed before proper JWT...
Chromium: CVE-2026-5291 Inappropriate implementation in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
PT-2026-30207
Name of the Vulnerable Software and Affected Versions Microsoft Bing affected versions not specified Description A Server-Side Request Forgery SSRF issue exists within Bing's search infrastructure. This could allow attackers to pivot into Microsoft's internal networks. The vulnerability involves...
OpenClaw: MSTeams thread history bypasses sender allowlist via Graph API
Summary MSTeams thread history bypasses sender allowlist via Graph API Current Maintainer Triage - Status: open - Normalized severity: medium - Assessment: Real in shipped v2026.3.28 MS Teams because Graph-fetched thread history bypasses sender allowlists, with unreleased mainline filtering fix...
Microsoft Bing Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network...
Chromium: CVE-2026-5292 Out of bounds read in WebCodecs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic
...