Lucene search
+L

146685 matches found

Microsoft CVE
Microsoft CVE
added 2025/12/24 9:04 a.m.12 views

can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data

...

5.8CVSS6.7AI score0.00182EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/24 9:02 a.m.23 views

Net-SNMP snmptrapd crash

...

9.8CVSS7AI score0.42842EPSS
SaveExploits2
CVE
CVE
added 2025/12/23 12:01 a.m.28 views

CVE-2025-67743

CVE-2025-67743 affects Local Deep Research. The vulnerability lies in the download service (download_service.py) where HTTP requests are made with raw requests.get() without SSRF protection, bypassing safeguards in safe_requests.py/ssrf_validator.py. This can allow an attacker to access internal ...

6.5CVSS6.5AI score0.00311EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/19 10:13 p.m.10 views

CVE-2025-65041

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

10CVSS6.8AI score0.00778EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 10:13 p.m.10 views

CVE-2025-64676

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

7.2CVSS7.3AI score0.01026EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/12/19 5:54 p.m.10 views

Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers

A suspected Russia-aligned group has been attributed to a phishing campaign that employs device code authentication workflows to steal victims' Microsoft 365 credentials and conduct account takeover attacks. The activity, ongoing since September 2025, is being tracked by Proofpoint under the...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/12/19 10:26 a.m.12 views

Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks

Authorities in Nigeria have announced the arrest of three "high-profile internet fraud suspects" who are alleged to have been involved in phishing attacks targeting major corporations, including the main developer behind the RaccoonO365 phishing-as-a-service PhaaS scheme. The Nigeria Police Force...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/12/19 12:31 a.m.20 views

EUVD-2025-204417

Microsoft Edge Chromium-based Spoofing Vulnerability...

3.1CVSS6AI score0.00273EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.7 views

PT-2025-52588

CVE-2025-68483 - Microsoft IIS HTTP Header Injection CVE ID : CVE-2025-68483 Published : Dec. 19, 2025, 4:16 a.m. | 2 hours, 5 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.9AI score
SaveExploits0References1
Talos
Talos
added 2025/12/19 12:00 a.m.15 views

Foxit PDF Editor Installation Uncontrolled Search Path Privilege Escalation Vulnerability

Talos Vulnerability Report TALOS-2025-2275 Foxit PDF Editor Installation Uncontrolled Search Path Privilege Escalation Vulnerability December 19, 2025 CVE Number CVE-2025-57779 SUMMARY A privilege escalation vulnerability exists during the installation of Foxit PDF Editor via the Microsoft Store....

7AI score
SaveExploits0
NVD
NVD
added 2025/12/18 10:16 p.m.12 views

CVE-2025-65046

Microsoft Edge Chromium-based Spoofing Vulnerability...

3.1CVSS0.00273EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/18 10:16 p.m.7 views

CVE-2025-65046

Microsoft Edge Chromium-based Spoofing Vulnerability...

3.1CVSS5.8AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 10:16 p.m.17 views

CVE-2025-64676

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

7.2CVSS0.01026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 10:02 p.m.36 views

CVE-2025-64676 Microsoft Purview eDiscovery Remote Code Execution Vulnerability

...

7.2CVSS0.01026EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 10:02 p.m.11 views

EUVD-2025-204413

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

7.2CVSS6.8AI score0.01026EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/18 10:02 p.m.52 views

CVE-2025-64676

CVE-2025-64676 concerns Microsoft Purview eDiscovery Remote Code Execution. A flaw in Purview (via the // path) allows an authorized attacker to execute code over the network. Affected software is Microsoft Purview/eDiscovery; the root cause is a path-related/code-execution flaw that can enable t...

7.2CVSS6.9AI score0.01026EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 10:02 p.m.1 views

CVE-2025-64676 Microsoft Purview eDiscovery Remote Code Execution Vulnerability

...

7.2CVSS6.6AI score0.01026EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/18 10:02 p.m.6 views

CVE-2025-64676

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

7.2CVSS5.7AI score0.01026EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/18 10:02 p.m.35 views

CVE-2025-65041 Microsoft Partner Center Elevation of Privilege Vulnerability

...

10CVSS0.00778EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 10:02 p.m.5 views

CVE-2025-65041 Microsoft Partner Center Elevation of Privilege Vulnerability

...

10CVSS6.6AI score0.00778EPSS
SaveExploits0References1
Rows per page
Query Builder