29423 matches found
CVE-2025-27740 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2025-27740 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
2025 Ransomware: Business as Usual, Business is Booming
Getting an edge on your adversaries involves understanding their behaviors and their mindset. Rapid7 Labs took a look at internal and publicly-available ransomware data for Q1 2025 and added our own insights to provide a picture of the year thus far—and what you can do now to reduce your attack...
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
Windows Cryptographic Services Information Disclosure Vulnerability
Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
Active Directory Certificate Services Elevation of Privilege Vulnerability
Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network...
Unauthorized File Access
awssamcli is vulnerable to Unauthorized File Access. The vulnerability is due to improper handling of symlinks during the Docker build process, allowing access to privileged host files via elevated permissions...
Microsoft Active Directory Certificate Services 安全漏洞
Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...
PT-2025-15539 · Microsoft · Remote Desktop Gateway Service +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is due to a use-after-free condition in the Windows Remote Desktop Gateway...
Microsoft Active Directory Domain Services 访问控制错误漏洞
Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA that is used to manage and organize resources, users, computers, and other security objects in a network. An access control error vulnerability exists in Microsoft Active Directory Domain Services. An...
PT-2025-15513 · Microsoft · Windows Remote Desktop Services +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to a use after free condition in Windows Remote Desktop Services, allowing an unauthorized attacker to execute code over a network. This enables...
Microsoft Windows Remote Desktop Services 安全漏洞
Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A security vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker exploiting this...
Microsoft Windows Cryptographic Services 安全漏洞
Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit the vulnerability to obtain sensitive information. The following products and...
Microsoft Windows Cryptographic Services 资源管理错误漏洞
Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit this vulnerability to cause a denial of service on the syste...
PT-2025-15585 · Microsoft · Windows Cryptographic Services +1
Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to the use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services, allowing an authorized attacker to disclos...
PT-2025-15497 · Microsoft · Windows Cryptographic Services +1
Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to uncontrolled resource consumption in Windows Cryptographic Services, allowing an unauthorized attacker to deny service over a network. This ca...
CVE-2025-3353
A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit...
Hotfix XS82ECU1085 - For Citrix Hypervisor 8.2 Cumulative Update 1
Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...
PT-2025-15225 · Unknown · Phpgurukul Men Salon Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical issue was discovered in the system, affecting an unknown part of the /admin/add-services.php file. The manipulation of the cost argument leads to SQL injection. It is...