Adobe Commerce 访问控制错误漏洞

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe USA. An access control error vulnerability exists in Adobe Commerce that stems from an improper access control issue that could result in elevation of privilege. The following versions are affected:...

PT-2025-24852 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to improper privilege management in the Windows Kernel, allowing an unauthorized attacker to elevate privileges locally. Recommendations: At the moment, there is...

PT-2025-24826 · Microsoft · Windows Win32K +1

Name of the Vulnerable Software and Affected Versions: Windows Win32K affected versions not specified Description: The issue is related to a use after free condition in the Windows Win32K - GRFX component, which allows an authorized attacker to elevate privileges locally. Recommendations: At the...

Apache CloudStack 安全漏洞

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. An authorization issue vulnerability exists in Apache CloudStack...

CVE-2025-32716: Out-of-bounds Read

Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2025-32713: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2025-24855

Name of the Vulnerable Software and Affected Versions Windows Netlogon affected versions not specified Description The issue is related to the use of an uninitialized resource in Windows Netlogon, allowing an unauthorized attacker to elevate privileges over a network. Recommendations At the momen...

KB5061036: Windows Server 2008 R2 Security Update (June 2025)

The remote Windows host is missing security update 5061036. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-33066 - Improper access contro...

KB5060999: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (June 2025)

The remote Windows host is missing security update 5060999. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-33066 - Improper access contro...

CVE-2025-47968: Improper Input Validation

Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

Fortinet多款产品 安全漏洞

Fortinet FortiOS and others are products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform. Fortinet FortiWeb is a web application layer firewall, Fortinet FortiProxy is a secure web proxy that protects employees from cyberattac...

PT-2025-24877

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to improper privilege management, allowing an authorized attacker to elevate privileges locally. There is no information provided about...

CVE-2025-33067: Improper Privilege Management

Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally...

WordPress plugin CryptoCloud - Crypto Payment Gateway 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An elevation of privilege vulnerability exists in the WordPress CryptoCloud - Crypto Payment Gateway plugin, which stems from improperly configured access control, for which no...

Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 安全漏洞

The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A security vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 that stems from a post-authentication command injection of the AT+MFMAC command, which could lead to...

WordPress plugin WP-Recall 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

CVE-2025-47966

Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network...

PT-2025-23979 · Microsoft · Power Automate

Name of the Vulnerable Software and Affected Versions: Power Automate affected versions not specified Description: Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, the...

SAMSUNG Exynos 1380 安全漏洞

SAMSUNG Exynos 1380 is a cell phone chip processor from South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Exynos 1380, which stems from reuse after release and could lead to elevation of privilege...

Razer Synapse 4 安全漏洞

Razer Synapse 4 is an application from the American company Razer, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 4 4.0.86.2502180127 and prior versions, which stems from a COM interface vulnerability that could lead to local elevation of...