CVE-2025-61301: Uncontrolled Resource Consumption

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...

PT-2025-54835

Уязвимость инструмента для автоматической синхронизации приложения с банком Gocardless связана с недостатками механизма формирования отчетов об ошибках. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...

CAPE security vulnerabilities

CAPE is a malware sandbox by the individual developer Kevin OReilly. CAPE has a security vulnerability that stems from an analysis denial vulnerability in reporting/mongodb.py and reporting/jsondump.py, which allows an attacker to submit samples to generate deeply nested or oversized behavioral...

CVE-2025-61301

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...

PT-2025-42814

Name of the Vulnerable Software and Affected Versions CAPEv2 versions prior to commit 52e4b43 on 2025-05-17 Description The software contains a flaw that allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports. This occurs by generating deeply nested or...

Exploit for Observable Discrepancy in Openbsd Openssh

Advanced Exploit Finder A comprehensive penetration testing t...

CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

bluescan

BlueScan - Bluetooth Security Scanner A comprehensive Bluetoo...

WordPress NikanWP WooCommerce Reporting plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin NikanWP WooCommerce Reporting versions = 1.0.0...

PT-2025-43831

Name of the Vulnerable Software and Affected Versions NikanWP WooCommerce Reporting versions prior to 1.0.1 Description A Cross-Site Request Forgery CSRF issue exists due to missing or incorrect nonce validation a unique token used to prevent forged requests on a function. This allows...

EUVD-2025-34329

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2025-34327

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55694 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2025-55694

CVE-2025-55694 affects the Windows Error Reporting service. The root cause is improper access control, enabling an authenticated local attacker to elevate privileges on affected Windows systems. Public documentation confirms the issue and links to Microsoft update guidance (KB5066780 and related ...

CVE-2025-55694 Windows Error Reporting Service Elevation of Privilege Vulnerability

...