Exploit for CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-202...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-54236link is external Adobe Commerce and Magento Improper Input Validation Vulnerability CVE-2025-59287link is external Microsoft Windows Server Update...

📄 Microsoft Windows Server Update Services Remote Code Execution

This is a proof of concept exploit for Microsoft Windows Server Update Services that leverages an unsafe deserialization of untrusted data in WSUS's AuthorizationCookie handling. This file demonstrates payload generation in C. using System; using System.IO; using System.Security.Cryptography; usi...

CVE-2025-59287

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

EUVD-2025-34268

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

CVE-2025-59287

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

...

2025-10 .NET 9.0.10 Security Update for x64 Server (KB5068332)

2025-10 .NET 9.0.10 Security Update for x64 Server KB5068332...

October 24, 2025—KB5070893 (OS Build 26100.6905) Security Update for Windows Server Update Services

None None...

October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services

None None...

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025

None None...

KB5066875: Windows Server 2012 Security Update (October 2025)

The remote Windows host is missing security update 5066875. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

EUVD-2019-3170

Malware in sbrugna...

RLSA-2025:7163 Moderate: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 X.Org:...

EUVD-2023-39320

Malicious code in bioql PyPI...

EUVD-2022-38786

Malicious code in bioql PyPI...

EUVD-2023-36343

Malicious code in bioql PyPI...

RLSA-2025:9178 Important: kea security update

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

Photon OS 5.0: Httpd PHSA-2025-5.0-0570

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0570. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security update for rmt-server

This update for rmt-server fixes the following issues: Update to version 2.23 CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. bsc1242893 CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session. bsc1242898 Patch Instructions: To install th...