CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-53845

An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...

CVE-2025-59282

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:23:53+00:00| seen|...

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...

CVE-2025-62156

creationtimestamp| type| source ---|---|--- 2025-10-14 13:52:38+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-p84v-gxvw-73pf 2025-12-09 20:55:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691600473250373...

CVE-2025-20718

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-20715

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-20710

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-20709

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-41707

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-18 07:11:13+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m3haazui6k2l...

CVE-2025-41704

creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-17 08:37:13+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3m3eulxahcx2d 2025-10-18 07:11:13+00:00| seen|...

GHSA-66RW-Q8W5-C2HG

creationtimestamp| type| source ---|---|--- 2025-10-14 13:26:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372746126553647...

CVE-2025-39664

creationtimestamp| type| source ---|---|--- 2025-10-14 03:33:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/115370412344212580 2025-10-14 06:31:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m35467igch2k 2025-10-14 23:21:22+00:00| seen|...

Microsoft Network Connection Status Indicator 访问控制错误漏洞

Microsoft Network Connection Status Indicator is a built-in network connection status component of a Windows operating system from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Network Connection Status Indicator, which can be exploited by an attacker to...

FreePBX 跨站脚本漏洞

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. A cross-site scripting vulnerability exists in FreePBX 16 versions prior to 16.0.68.39 and FreePBX 17 versions...

PT-2025-42093

Name of the Vulnerable Software and Affected Versions Network Connection Status Indicator NCSI affected versions not specified Description An issue with access control in Network Connection Status Indicator NCSI could allow a local attacker to gain elevated privileges. Recommendations At the...

Fortinet FortiAnalyzer 授权问题漏洞

FortiAnalyzer is Fortinet's centralized security analysis and reporting platform. A security vulnerability exists in FortiAnalyzer that stems from a flaw in the authentication mechanism for OFTP requests. An attacker can exploit this vulnerability to obtain device operational status information o...

ROS-20251014-02

A vulnerability in the pamsmauthenticate function of the Yubico pam-u2f PAM module is related to the return of an invalid status code state. Exploitation of the vulnerability could allow an attacker to escalate privileges...

PT-2025-42182

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.68.39 FreePBX versions prior to 17.0.18.38 Description FreePBX, an open source GUI for managing Asterisk, contains a reflected cross-site scripting issue on the Asterisk HTTP Status page. The page is exposed by...