Microsoft Windows Server code-related vulnerabilities

Microsoft Windows Server is a set of server operating systems from the American company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Windows Server, which can be exploited by an attacker to execute arbitrary code on a target system by sending a specially crafted...

Microsoft Windows Cryptographic Services security vulnerabilities

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services, which can be exploited by an attacker to obtain sensitive information...

CVE-2025-59193: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

PT-2025-41990

Name of the Vulnerable Software and Affected Versions network access point configuration services affected versions not specified Description A flaw exists in the web-based management interface of network access point configuration services that could allow a remote attacker with authentication t...

PT-2025-42058

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description A risky implementation within a cryptographic primitive used by Windows Cryptographic Services can allow a local attacker to disclose information. Recommendations At th...

Microsoft Windows Internet Information Services (IIS) and Microsoft Inbox COM Objects resource management vulnerabilities

Microsoft Windows Internet Information Services IIS and Microsoft Inbox COM Objects are both products of Microsoft Corporation.Microsoft Windows Internet Information Services is a web server for the Windows Server platform. Information Services is a web server for the Windows Server...

PT-2025-42096

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description An issue exists in Windows Management Services where the use of an uninitialized resource can allow a local attacker to disclose information. Recommendations At the moment...

PT-2025-42143

Name of the Vulnerable Software and Affected Versions Xbox Gaming Services affected versions not specified Description An issue involving improper link resolution before file access, known as 'link following', exists in Xbox Gaming Services. This allows an authorized attacker to elevate privilege...

CVE-2025-59281: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

PT-2025-42147

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server Update Services WSUS versions prior to the October 2025 security updates. Description A critical remote code execution RCE vulnerability exists in Windows Server Update Services WSUS due to unsafe deserialization of...

Windows Server Update Service Deserialization Remote Code Execution

This module exploits deserialization vulnerability in legacy serialization mechanism in Windows Server Update Services WSUS. The vulnerability allows unauthenticated attacker to create specially crafted event, which triggers unsafe deserialization upon server synchronization. The module does not...

EUVD-2025-33961

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-11663

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-11663

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-11663 Campcodes Online Beauty Parlor Management System manage-services.php sql injection

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-11663 Campcodes Online Beauty Parlor Management System manage-services.php sql injection

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-11663

CVE-2025-11663 affects Campcodes Online Beauty Parlor Management System 1.0. The vulnerability is a SQL injection in the /admin/manage-services.php file caused by manipulation of the sername parameter. It can be triggered remotely and public exploit code exists. Affected software is Campcodes’ we...

CVE-2025-11663

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...

GSS-NTLMSSP Plugin DoS

The vulnerability of the GSS-NTLMSSP plugin of the GSSAPI library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...