27436 matches found
EUVD-2025-34392
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
CVE-2025-59201
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
CVE-2025-59201
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
...
CVE-2025-59201
CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835âKB50668...
CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
...
CVE-2025-53845
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
CVE-2025-59282
creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:23:53+00:00| seen|...
Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
CVE-2025-62156
creationtimestamp| type| source ---|---|--- 2025-10-14 13:52:38+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-p84v-gxvw-73pf 2025-12-09 20:55:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691600473250373...
CVE-2025-20715
creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...
CVE-2025-20718
creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...
CVE-2025-20709
creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...
CVE-2025-20710
creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...
CVE-2025-41704
creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-17 08:37:13+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3m3eulxahcx2d 2025-10-18 07:11:13+00:00| seen|...
CVE-2025-41707
creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-18 07:11:13+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m3haazui6k2l...
GHSA-66RW-Q8W5-C2HG
creationtimestamp| type| source ---|---|--- 2025-10-14 13:26:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372746126553647...
CVE-2025-39664
creationtimestamp| type| source ---|---|--- 2025-10-14 03:33:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/115370412344212580 2025-10-14 06:31:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m35467igch2k 2025-10-14 23:21:22+00:00| seen|...
CVE-2025-59429: Improper Neutralization of Input During Web Page Generation
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...