CVE-2025-49666: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network...

CVE-2025-47978: Out-of-bounds Read

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network...

CVE-2025-49719: Improper Input Validation

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2025-49753: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-49729: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

PT-2025-28589

Name of the Vulnerable Software and Affected Versions: Windows Media affected versions not specified Description: A heap-based buffer overflow issue in Windows Media enables an unauthorized attacker to execute code over a network. This can be achieved when the attacker is on an adjacent network...

CVE-2025-49673: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-49701: Improper Authorization

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-33054: Insufficient UI Warning of Dangerous Operations

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-7326: Weak Authentication

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life EOL software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry...

CVE-2025-49717: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SharePoint 代码注入漏洞

SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A remote code execution vulnerability...

Microsoft Office Sharepoint Server 授权问题漏洞

SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A spoofing vulnerability exists in...

CVE-2025-49718: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2025-7075 BlackVue Dashcam 590X HTTP Endpoint upload.cgi unrestricted upload

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. The attack needs to be done within...

CVE-2025-7070 IROAD Dashcam Q9 MFA Pairing Request allocation of resources

A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component MFA Pairing Request Handler. The manipulation leads to allocation of resources. The attack needs to be done within the local...

CVE-2025-6916

A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. This affects the function FormLogin of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack needs to be initiated within the local...

CVE-2025-49713: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

IBM MQ 9.1 < 9.1.0.29 LTS / 9.2 < 9.2.0.36 LTS / 9.3 < 9.3.0.30 LTS / 9.3 < 9.4.3 CD / 9.4 < 9.4.0.12 LTS / 9.4.3 (7238312)

The version of IBM MQ Server running on the remote host is affected by multiple vulnerabilities as referenced in the 7238312 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions tha...

CVE-2025-6532

A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611. Affected by this vulnerability is an unknown functionality of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper access controls. The attack can only be initiated within the...