853 matches found
SUSE-SU-2025:3872-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap...
Exploit for Deserialization of Untrusted Data in Microsoft
🚨 ALERTA CRÍTICA DE CIBERSEGURIDAD: RCE en WSUS CVE-2025-5928...
CVE-2025-34316
IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the txtmailuser and txtmailpass parameters when updating the mail server settings. When a user updates the mail...
CVE-2025-34316 IPFire < v2.29 Stored XSS via Mail Server Settings
IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the txtmailuser and txtmailpass parameters when updating the mail server settings. When a user updates the mail...
Exploit for CVE-2025-59287
In this study, we will examine a critical vulnerability CVE-202...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-54236link is external Adobe Commerce and Magento Improper Input Validation Vulnerability CVE-2025-59287link is external Microsoft Windows Server Update...
📄 Microsoft Windows Server Update Services Remote Code Execution
This is a proof of concept exploit for Microsoft Windows Server Update Services that leverages an unsafe deserialization of untrusted data in WSUS's AuthorizationCookie handling. This file demonstrates payload generation in C. using System; using System.IO; using System.Security.Cryptography; usi...
CVE-2025-59287
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...
EUVD-2025-34268
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...
CVE-2025-59287
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...
CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
...
2025-10 .NET 9.0.10 Security Update for x64 Server (KB5068332)
2025-10 .NET 9.0.10 Security Update for x64 Server KB5068332...
October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services
None None...
October 24, 2025—KB5070893 (OS Build 26100.6905) Security Update for Windows Server Update Services
None None...
KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025
None None...
KB5066875: Windows Server 2012 Security Update (October 2025)
The remote Windows host is missing security update 5066875. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
EUVD-2019-3170
Malware in sbrugna...
RLSA-2025:7163 Moderate: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 X.Org:...