7204 matches found
NeuVector telemetry sender is vulnerable to MITM and DoS
Impact This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server at https://upgrades.neuvector-upgrade-responder.livestock.rancher.io. In affected...
CloudEdge Online Cameras and App
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain access to live video feed and camera control. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...
Raisecomm RAX701-GC Series
RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication and gain unauthenticated root shell access to the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...
EUVD-2025-35111
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
CAPE 安全漏洞
CAPE is a malware sandbox by the individual developer Kevin OReilly. CAPE has a security vulnerability that stems from an analysis denial vulnerability in reporting/mongodb.py and reporting/jsondump.py, which allows an attacker to submit samples to generate deeply nested or oversized behavioral...
CVE-2025-61301
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
Exploit for Observable Discrepancy in Openbsd Openssh
Advanced Exploit Finder A comprehensive penetration testing t...
CVE-2025-55694
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55692
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
bluescan
BlueScan - Bluetooth Security Scanner A comprehensive Bluetoo...
WordPress NikanWP WooCommerce Reporting plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin NikanWP WooCommerce Reporting versions = 1.0.0...
EUVD-2025-34327
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2025-34329
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55694
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55694
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55692
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55692
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55694 Windows Error Reporting Service Elevation of Privilege Vulnerability
...
CVE-2025-55694
CVE-2025-55694 affects the Windows Error Reporting service. The root cause is improper access control, enabling an authenticated local attacker to elevate privileges on affected Windows systems. Public documentation confirms the issue and links to Microsoft update guidance (KB5066780 and related ...
