Exploit for Relative Path Traversal in Fortinet Fortimanager

Fortimanager insufficient authorization checks CVE-2024-23666...

CVE-2025-1243

Temporal api-go library prior to v1.44.1 fails to send update response data to Data Converter when used in a gRPC proxy during UpdateWorkflowExecution, causing incomplete Data Converter transformations (e.g., encryption) on the update response field. This occurs only when using the UpdateWorkflow...

Information Exposure

Overview org.geonetwork-opensource:gn-services is a GeoNetwork Services. Affected versions of this package are vulnerable to Information Exposure through the search end-point response headers. An attacker can gather sensitive information about the server's software stack by analyzing these header...

CVE-2024-21924

The CVE-2024-21924 entry concerns an SMM callout vulnerability in AMD’s AmdPlatformRasSspSmm driver that could allow a ring-0 attacker to modify boot-services handlers and potentially achieve arbitrary code execution. Documents detail that the vulnerability affects AMD SMM components in multiple ...

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

How Wiz found a Critical NVIDIA AI vulnerability:  Deep Dive into a container escape (CVE-2024-0132)

Technical details on a critical severity vulnerability CVE-2024-0132 in NVIDIA Container Toolkit and GPU Operator, affecting cloud service providers...

CVE-2025-21351

Windows Active Directory Domain Services API Denial of Service Vulnerability...

CVE-2025-21347

Windows Deployment Services Denial of Service Vulnerability...

CVE-2025-21347

Windows Deployment Services Denial of Service Vulnerability...

CVE-2025-21347

CVE-2025-21347 is linked to the Windows Update Stack and is described in the connected NCSC advisory as a Denial-of-Service vulnerability. The CVE entry in that document assigns a base CVSS-like severity of 6.0 and notes that Microsoft has updates available to fix the issue. The mode of the vulne...

CVE-2025-21347 Windows Deployment Services Denial of Service Vulnerability

...

CVE-2025-21347 Windows Deployment Services Denial of Service Vulnerability

...

Security Advisory Ivanti Cloud Services Application (CSA) (CVE-2024-47908, CVE-2024-11771)

Summary Ivanti has released updates for Ivanti Cloud Services Application CSA which addresses critical and medium severity vulnerabilities. Successful exploitation of CVE-2024-47908 could allow a remote authenticated attacker to achieve remote code execution and CVE-2024-11771 could allow a remot...

Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks

Gcore's latest DDoS Radar report analyzes attack data from Q3–Q4 2024, revealing a 56% YoY rise in the total number of DDoS attacks with the largest attack peaking at a record 2 Tbps. The financial services sector saw the most dramatic increase, with a 117% rise in attacks, while gaming remained...

Windows Deployment Services Denial of Service Vulnerability

...

CVE-2025-24868 Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)

The User Account and Authentication service UAA for SAP HANA extended application services, advanced model SAP HANA XS advanced model allows an unauthenticated attacker to craft a malicious link, that, when clicked by a victim, redirects the browser to a malicious site due to insufficient redirec...

CVE-2025-24868 Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)

The User Account and Authentication service UAA for SAP HANA extended application services, advanced model SAP HANA XS advanced model allows an unauthenticated attacker to craft a malicious link, that, when clicked by a victim, redirects the browser to a malicious site due to insufficient redirec...

Microsoft Windows Deployment Services 后置链接漏洞

Microsoft Windows Deployment Services is a setup container for Windows Deployment Services, an updated and redesigned version of Remote Installation Services RIS from Microsoft Corporation USA, which can be used to set up new computers via unattended network-based installations. A backlink...

Microsoft Active Directory Domain Services 资源管理错误漏洞

Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA used to manage and organize resources, users, computers, and other security objects in a network. A resource management error vulnerability exists in Microsoft Active Directory Domain Services. An attacker...

AMD Integrated Management Technology 安全漏洞

AMD Integrated Management Technology is a management technology from Ultraviolet Semiconductor AMD that is primarily used to enable AMD DASH management features on AMD PRO hardware. A security vulnerability exists in AMD Integrated Management Technology that stems from incorrect default permissio...