29337 matches found
PT-2026-2722
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A flaw exists in Windows Management Services that could allow a local attacker to gain elevated privileges. The issue involves a use-after-free condition. An authorized...
PT-2026-2728
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition exists in Windows Management Services that could allow a locally authenticated attacker to gain elevated privileges. The issue involves improper...
PT-2026-2729
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition exists in Windows Management Services that could allow a local attacker to gain elevated privileges. The issue allows attackers to affect the...
KLA90840 Multiple vulnerabilities were found in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of...
PT-2026-2710
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition exists in Windows Management Services that could allow a locally authenticated attacker to gain elevated privileges. The issue involves improper...
PT-2026-2719
CVE-2026-20874 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/KTYAuV7eee...
PT-2026-2718
CVE-2026-20873 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/VZ7C3660ds...
PT-2026-2707
CVE-2026-20862 Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally. https://t.co/U4p5wXrKrC...
PT-2026-2711
CVE-2026-20866 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/URu04Bnwnl...
Microsoft Windows Deployment Services 访问控制错误漏洞
Microsoft Windows Deployment Services is a setup container for Microsoft's Windows Deployment Services, an updated and redesigned version of Remote Installation Services RIS, that can be used to set up new computers via unattended network-based installations. An access control error vulnerability...
PT-2026-2723
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A flaw exists in Windows Management Services that could allow an authorized attacker to elevate privileges locally due to a race condition during concurrent execution usin...
CVE-2026-22772
Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Prior to 1.8.5, Fulcio's metaRegex function uses unanchored regex, allowing attackers to bypass MetaIssuer URL validation and trigger SSRF to arbitrary internal services. Since the SSRF on...
CVE-2026-22772 Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass
Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Prior to 1.8.5, Fulcio's metaRegex function uses unanchored regex, allowing attackers to bypass MetaIssuer URL validation and trigger SSRF to arbitrary internal services. Since the SSRF on...
CVE-2025-52694
Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrato...
Fulcio 代码问题漏洞
Fulcio is a certificate authority open-sourced by sigstore. A code issue vulnerability exists in Fulcio versions prior to 1.8.5 that stems from the use of unanchored regular expressions for MetaIssuer URL validation, which could lead to bypassing validation and triggering a blind SSRF attack...
Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response
Threat actors exploited Cloudflare's free-tier infrastructure and legitimate Python environments to deploy the AsyncRAT remote access trojan, demonstrating advanced evasion techniques that abuse trusted cloud services for malicious operations...
Avahi 安全漏洞
Avahi is the Avahi open source set of local service discovery tools for Linux. A security vulnerability exists in Avahi 0.9-rc2 and earlier versions, which stems from sending two unsolicited announcements containing CNAME resource records 2 seconds apart, which could cause avahi-daemon to crash...
CVE-2025-13393
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.3.1. This is due to insufficient validation of user-supplied URLs before passing them to the getimagesize function in the Elementor widget integration. This...
CVE-2026-22611
AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From versions 4.0.0 to before 4.0.3.3, Customer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. This...
CVE-2026-22611 AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From versions 4.0.0 to before 4.0.3.3, Customer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. This...