3228 matches found
CVE-2025-25004
CVE-2025-25004 affects Microsoft PowerShell. The connected documents corroborate a local privilege escalation vulnerability due to improper access control, enabling an authorized attacker to obtain elevated privileges on the host. The advisory entries (including NCSC-2025-0313) assign CVSS v3.1/3...
CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability
...
CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability
...
EUVD-2025-34354
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
PowerShell Elevation of Privilege Vulnerability
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
Researchers Expose TA585's MonsterV2 Malware Capabilities and Attack Chain
Cybersecurity researchers have shed light on a previously undocumented threat actor called TA585 that has been observed delivering an off-the-shelf malware called MonsterV2 via phishing campaigns. The Proofpoint Threat Research Team described the threat activity cluster as sophisticated, leveragi...
PT-2025-41974
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description An improper access control issue exists in Microsoft PowerShell. This allows an authorized attacker with local access to elevate privileges. The flaw enables privilege escalation...
Microsoft PowerShell Utility 访问控制错误漏洞
Microsoft PowerShell Utility is a utility module from Microsoft Corporation USA. The module includes many of the basic administrative commands for PowerShell. An access control error vulnerability exists in Microsoft PowerShell Utility, which stems from an attacker's ability to elevate privileges...
KLA89273 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege...
New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs
Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...
From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on Ukraine
Russian hackers' adoption of artificial intelligence AI in cyber attacks against Ukraine has reached a new level in the first half of 2025 H1 2025, the country's State Service for Special Communications and Information Protection SSSCIP said. "Hackers now employ it not only to generate phishing...
BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers
A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot. "The attackers pose as recruiters, distributing...
XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities
Cybersecurity researchers have charted the evolution of XWorm malware, turning it into a versatile tool for supporting a wide range of malicious actions on compromised hosts. "XWorm's modular design is built around a core client and an array of specialized components known as plugins," Trellix...
EUVD-2018-19885
Malware in sbrugna...
EUVD-2017-0584
Malware in sbrugna...
EUVD-2020-21918
Malware in sbrugna...
EUVD-2018-19884
Malware in sbrugna...
EUVD-2018-0019
Malware in sbrugna...