GHSA-RRJV-57MM-J6CM

creationtimestamp| type| source ---|---|--- 2025-10-14 20:38:41+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115374444988356308...

CVE-2025-59429

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...

GHSA-292P-RJ6H-54CP

creationtimestamp| type| source ---|---|--- 2025-10-14 19:50:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374254067224192...

GHSA-5W3R-F6GM-C25W

creationtimestamp| type| source ---|---|--- 2025-10-14 19:49:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374251460586628...

GHSA-QGJ3-F9GJ-98V9

creationtimestamp| type| source ---|---|--- 2025-10-14 19:47:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374244887228575...

CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...

CVE-2025-59429

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...

CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...

CVE-2025-59429 FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page

FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...

CVE-2025-59429

CVE-2025-59429 affects FreePBX core: reflected XSS on the Asterisk HTTP Status page. Affected: FreePBX 16 < 16.0.68.39 (port 8088 exposed by default) and FreePBX 17

EUVD-2025-34392

Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...

CVE-2025-59201

Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...

CVE-2025-59201

Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...

CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-59201

CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...

CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-53845

An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...

CVE-2025-59282

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:23:53+00:00| seen|...

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...

CVE-2025-62156

creationtimestamp| type| source ---|---|--- 2025-10-14 13:52:38+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-p84v-gxvw-73pf 2025-12-09 20:55:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691600473250373...