Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally...

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...

Windows Management Services Information Disclosure Vulnerability

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally...

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

AWS VDP: Responsible disclosure - public S3 bucket exposing JSON/config files

A publicly listable S3 bucket was discovered, exposing various JSON and configuration files. The bucket listing and file metadata were retrievable without authentication...

CVE-2025-11663

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-37146: Improper Neutralization of Special Elements used in a Command

A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

Microsoft Active Directory Federation Services log information leakage vulnerability

Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...

CVE-2025-59258: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally...

CVE-2025-58720: Use of a Cryptographic Primitive with a Risky Implementation

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2025-59202: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2025-59204: Use of Uninitialized Resource

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally...

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025 Applies To Windows Server 2012 ESU Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain...

KLA89278 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-59281 Exploitation Public exploits exist for this vulnerability. Related products Xbox-Gaming-Services CVE list CVE-2025-59281...

PT-2025-42135

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An issue exists in Active Directory Federation Services where sensitive information is inserted into log files. This allows a local attacker to disclose...

PT-2025-42085

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges locally...

Microsoft Windows Remote Desktop Services Authorization Vulnerability

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. An authorization issue vulnerability exists in Microsoft Windows Remote Desktop Services that stems from an...

Microsoft Xbox Gaming Services < 31.105.17001.0 Elevation of Privilege (October 2025)

The version of Microsoft Xbox Gaming Services on the remote Windows host is prior to 31.105.17001.0. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to eleva...

CVE-2025-59184: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to disclose information locally...

Microsoft Windows race condition vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A competitive condition issue vulnerability exists in Microsoft Windows Management Services, which can be exploited by an attacker to elevate privileges...