3231 matches found
December 9, 2025—KB5071542 (OS Build 25398.2025)
None None...
December 9, 2025—KB5071507 (Security-only update)
None None...
December 9, 2025—KB5071547 (OS Build 20348.4529)
None None...
PowerShell Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...
December 9, 2025—KB5071544 (OS Build 17763.8146)
None None...
December 9, 2025—KB5071543 (OS Build 14393.8688)
None None...
KB5074353: Security Update for Windows PowerShell (OS Build 20348.4467)
None None...
December 9, 2025—KB5071504 (Monthly Rollup)
None None...
December 9, 2025—KB5071546 (OS Builds 19045.6691 and 19044.6691)
None None...
December 9, 2025—KB5071501 (Monthly Rollup)
None None...
December 9, 2025—KB5071506 (Security-only update)
None None...
KLA90811 Multiple vulnerabilities in Microsoft Product (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...
Microsoft Windows PowerShell 命令注入漏洞
Microsoft Windows PowerShell is a command line shell program and scripting environment from Microsoft Corporation USA that enables command line users and script writers to take advantage of . A command injection vulnerability exists in Microsoft Windows PowerShell. An attacker could exploit the...
PT-2025-50150
Name of the Vulnerable Software and Affected Versions Microsoft Windows PowerShell versions prior to December 17, 2025 Description The issue is a command injection flaw in Windows PowerShell that allows an unauthorized attacker to execute code locally. The flaw stems from improper neutralization ...
KLA90812 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote cod...
Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT
Cybersecurity researchers are calling attention to a new campaign dubbed JSSMUGGLER that has been observed leveraging compromised websites as a distribution vector for a remote access trojan named NetSupport RAT. The attack chain, analyzed by Securonix, involves three main moving parts: An...
Exploit for CVE-2025-55182
React2Shell Scanner High Fidelity Detection & Exploitation To...
Fileless protection explained: Blocking the invisible threat others miss
Most antivirus software for personal users scans your computer for malware hiding in files. This is, after all, how most malware is traditionally spread. But what about attacks that never create files? Fileless malware is a fast-growing threat that evades traditional antivirus software, because...
curl: runs javascript on powershell when it shouldnt
On windows, if I run a curl on powershell for a script that should show alert1 it just executes the script when it shouldn't. I did not use AI to find or report this bug. Affected version on CMD I ran curl --version curl 8.16.0 Windows libcurl/8.16.0 Schannel zlib/1.3.1 WinIDN on powershell it...
Microsoft Windows Extended Security Updates (ESU) Status Detection
SMB login-based detection of the Microsoft Windows Extended Security Updates ESU status. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...