EUVD-2021-13837

Malware in sbrugna...

EUVD-2020-24958

Malware in sbrugna...

EUVD-2023-32920

Malicious code in bioql PyPI...

EUVD-2023-42357

Malicious code in bioql PyPI...

CVE-2023-38558

A vulnerability has been identified in SIMATIC PCS neo Administration Console V4.0 All versions, SIMATIC PCS neo Administration Console V4.0 Update 1 All versions. The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the...

CVE-2019-0813

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center Elevation of Privilege Vulnerability'...

The vulnerability of Windows Admin Center’s server management tool, related to incorrect external management of file names or paths, allows a perpetrator to disclose protected information.

The vulnerability of Windows Admin Center relates to incorrect external management of file names or paths. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system...

Microsoft Windows Admin Center Information Disclosure (April 2025)

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2025-29819 Note that Nessus has...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and gain access to sensitive data. The vulnerability with reference CVE-2025-27489 allows the malicious party, by loading a non-Microsoft DLL...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

Windows Admin Center in Azure Portal Information Disclosure Vulnerability

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected: Windows...

CVE-2025-29819: External Control of File Name or Path

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

KLA82407 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Local Cluster...

PT-2025-15591 · Microsoft · Azure Portal Windows Admin Center

Name of the Vulnerable Software and Affected Versions: Azure Portal Windows Admin Center affected versions not specified Description: The issue allows an unauthorized attacker to disclose information locally due to external control of file name or path in Azure Portal Windows Admin Center...

CVE-2024-42012: Insufficiently Protected Credentials

GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows admin or debugging rights can therefore steal the user's Blocky password and from there impersonate...

CVE-2024-42012

Versions of GRAU DATA Blocky prior to 3.1 contain a security vulnerability where passwords are stored in an encrypted format rather than being hashed. Because the login screen compares the input to the decrypted cleartext password , an attacker with Windows admin or debugging rights can steal the...