Lucene search
+L

146617 matches found

The Hacker News
The Hacker News
added 2025/12/18 11:30 a.m.10 views

The Case for Dynamic AI-SaaS Security as Copilots Scale

Within the past year, artificial intelligence copilots and agents have quietly permeated the SaaS applications businesses use every day. Tools like Zoom, Slack, Microsoft 365, Salesforce, and ServiceNow now come with built-in AI assistants or agent-like features. Virtually every major SaaS vendor...

6AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/18 9:04 a.m.11 views

usb: gadget: f_eem: Fix memory leak in eem_unwrap

...

5.5CVSS6.7AI score0.00202EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/18 9:03 a.m.8 views

usb: storage: Fix memory leak in USB bulk transport

...

5.5CVSS5.4AI score0.00202EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/18 8:00 a.m.16 views

Custom Question Answering Elevation of Privilege Vulnerability

...

9.9CVSS7AI score0.00721EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/18 8:00 a.m.14 views

Microsoft Purview eDiscovery Remote Code Execution Vulnerability

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

7.2CVSS7.3AI score0.01026EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/18 8:00 a.m.20 views

Microsoft Partner Center Elevation of Privilege Vulnerability

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

10CVSS6.8AI score0.00778EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.10 views

Microsoft Partner Center 授权问题漏洞

Microsoft Partner Center is an online platform from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Partner Center that stems from improper authorization and could allow an unauthorized attacker to elevate privileges over the network...

10CVSS6.4AI score0.00778EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.16 views

PT-2025-52358

Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description A flaw in Microsoft Purview allows an authorized attacker to execute code over a network via the '//' path. Recommendations At the moment, there is no information about a newer...

7.2CVSS6.8AI score0.01026EPSS
SaveExploits0References8
Microsoft KB
Microsoft KB
added 2025/12/18 12:00 a.m.75 views

December 18, 2025—KB5074975 (OS Build 17763.8148) Out-of-band

None None...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.14 views

PT-2025-52361

Name of the Vulnerable Software and Affected Versions Microsoft Partner Center affected versions not specified Description An improper authorization issue exists in Microsoft Partner Center. This allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment,...

10CVSS6.3AI score0.00778EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.32 views

PT-2025-52362

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A spoofing issue exists in Microsoft Edge Chromium-based. Information about this issue has been published. Recommendations At the moment, there is no information about a...

3.1CVSS6.1AI score0.00273EPSS
SaveExploits0References11
Veeam
Veeam
added 2025/12/18 12:00 a.m.83 views

OneDrive / SharePoint Backup Fails with "Error: Invalid MIME content-length header encountered on read."

Challenge A backup job for OneDrive or SharePoint items processed by Veeam Backup for Microsoft 365 fails when attempting to download certain item versions, displaying the following error: Invalid MIME content-length header encountered on read Cause The issue is related to the download process us...

5.8AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.9 views

Microsoft Purview 代码注入漏洞

Microsoft Purview is a data security and management software from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Purview that originates from path traversal and could lead to network code execution...

7.2CVSS7.4AI score0.01026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.24 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to perform spoofing attacks...

3.1CVSS6.1AI score0.00273EPSS
SaveExploits0References1
Microsoft Secure
Microsoft Secure
added 2025/12/17 5:00 p.m.11 views

Access Fabric: A modern approach to identity and network access

Today, most organizations use multiple identity systems and multiple network access solutions from multiple vendors. This happens, either intentionally or organically, when different areas of a company choose different tools, creating a fragmented environment that leaves weaknesses that...

7AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2025/12/17 5:00 p.m.15 views

Access Fabric: A modern approach to identity and network access

Today, most organizations use multiple identity systems and multiple network access solutions from multiple vendors. This happens, either intentionally or organically, when different areas of a company choose different tools, creating a fragmented environment that leaves weaknesses that...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/17 9:05 a.m.8 views

Potential non-constant time compiled code with Clang LLVM

...

1CVSS7AI score0.00144EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/17 9:05 a.m.16 views

Un-verified kernel bypass Secure Boot mechanism in direct boot mode

...

8.4CVSS7AI score0.00755EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/17 9:04 a.m.12 views

binfmt_misc: restore write access before closing files opened by open_exec()

...

6.2CVSS6.1AI score0.00192EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/17 9:03 a.m.10 views

timers: Fix NULL function pointer race in timer_shutdown_sync()

...

4.7CVSS6.7AI score0.0013EPSS
SaveExploits0
Rows per page
Query Builder