D-Link DIR-816 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. The D-Link DIR-816A2 suffers from an Access Control Error vulnerability that stems from improper access control of the form2alg.cgi component, which can be exploited by an unauthenticated attacker to set up agl services via a specially...

The vulnerability of the Active Directory Domain Services service on the Windows operating system allows a perpetrator to elevate their privileges to a system-level level.

The vulnerability of the Active Directory Domain Services service on the Windows operating system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to a system-level level...

CVE-2025-0500

creationtimestamp| type| source ---|---|--- 2025-01-15 19:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsi3evqzb2h 2025-01-15 19:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfsk5jn72q2k 2025-01-15 20:59:21+00:00| seen|...

SUSE CVE-2025-23222

An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as root. Specifically, dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods in the actual D-Bus services, and the actual D-Bus servic...

PT-2025-4382

Name of the Vulnerable Software and Affected Versions Sentry versions prior to 25.1.0 Description A critical issue was discovered in the SAML SSO implementation of Sentry, allowing an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on th...

CVE-2025-21330

Windows Remote Desktop Services Denial of Service Vulnerability...

CVE-2025-21309

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2025-21309

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2025-21293

Active Directory Domain Services Elevation of Privilege Vulnerability...

CVE-2025-21193

Active Directory Federation Server Spoofing Vulnerability...

CVE-2025-21330 Windows Remote Desktop Services Denial of Service Vulnerability

...

CVE-2025-21309 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-21309

CVE-2025-21309 is a Windows Remote Desktop Services remote code execution vulnerability. The CVE entry indicates a NETWORK, HIGH-severity issue (CVSS v3.1: 8.1) affecting Windows Remote Desktop Services; no root-cause or affected version details are provided in the documents. Connected sources co...

CVE-2025-21297

CVE-2025-21297 is a Windows Remote Desktop Services remote code execution vulnerability with CVSS v3.1 base score 8.1 (HIGH). The initial document indicates a network attack vector with no user interaction and high impact on confidentiality, integrity, and availability. Connected sources confirm ...

CVE-2025-21297 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-21297 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions

The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion in cryptocurrency, dwarfing the now-defunct Hydra to become the largest online illicit marketplace to have ever operated. The figures, released by blockchain analytics...

Windows Remote Desktop Services Remote Code Execution Vulnerability

...

Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2024-12365

The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the isw3tcadminpage function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain...