Google Chrome 跨站脚本漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that is caused due to insufficient data validation in extensions. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome 跨站脚本漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

CVE-2025-21340

Windows Virtualization-Based Security VBS Security Feature Bypass Vulnerability...

CVE-2025-21328

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21211

Secure Boot Security Feature Bypass Vulnerability...

CVE-2025-21215

Secure Boot Security Feature Bypass Vulnerability...

CVE-2025-21299 Windows Kerberos Security Feature Bypass Vulnerability

...

Microsoft MapUrlToZone 安全漏洞

Microsoft Windows HTML Platforms is a technology for rendering and executing HTML content on the Windows operating system. A security feature bypass vulnerability exists in Microsoft Windows HTML Platforms, which is caused by a security feature bypass vulnerability in the HTML Platforms component...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Windows Server...

PT-2025-4220 · Microsoft · Windows Virtualization-Based Security +1

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS affected versions not specified Description: A security-feature bypass issue allows attackers to affect the system. This issue is related to the Windows Virtualization-Based Security VBS and enables...

PT-2025-1102 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability, specifically concerning the MapUrlToZone method in Windows operating systems. This vulnerability is associated with incorrec...

PT-2025-1089 · Microsoft · Mshtml +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to an incorrect path equivalence resolution in the MSHTML platform of Microsoft Windows operating systems. This can be exploited by a remote attacker to...

PT-2025-1239 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited to circumvent existing security restrictions. This is due to deficiencies in the...

The vulnerability in the Advanced PWA module of the Drupal CMS system, related to incorrect authentication, allows a hacker to bypass security restrictions and execute a Forceful Browsing attack.

The vulnerability of the Advanced PWA module in Drupal’s Push Notifications CMS system is related to improper authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

PT-2025-1165 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security-feature bypass vulnerability that affects the system. It is associated with an out-of-bounds read in memory in the SPNEGO NEGOEX security mechanism of...

CVE-2024-41787

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

CVE-2024-41787 IBM Engineering Requirements Management DOORS Next code execution

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

Security Bulletin: Due to the use of Eclipse Jetty, IBM App Connect Professional is vulnerable to bypass security restrictions

Summary Eclipse Jetty is used within IBM App Connect Professional Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty could allow a remote attacker to bypass security restrictions, caused by improper validation on the authority segment of a URI in the HttpURI class. By sending a...

KLA78850 OSI vulnerability in Microsoft Office

Information disclosure vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2025-21385 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Office CVE list CVE-2025-213...

KLA78851 OSI vulnerability in Microsoft Azure

Information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2025-21380 CVE list CVE-2025-21380 critical Solution Install necessary updates from the KB section, that are listed in your...