JetBrains TeamCity < 2025.07.2 Information Disclosure (Windows)

The version of JetBrains TeamCity installed on the remote Windows host is prior to 2025.07.2. It is, therefore, affected by an information disclosure vulnerability due to missing Git URL validation. An authenticated, remote attacker can exploit this to cause credential leakage. Note that Nessus h...

Mozilla Firefox ESR < 140.3

The version of Firefox ESR installed on the remote Windows host is prior to 140.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-75 advisory. - Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of...

Rockwell FactoryTalk Activation Manager 5.x < 5.02 Information Disclosure

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is 5.x prior to 5.02. It is, therefore, affected by an information disclosure vulnerability. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. Thi...

Microsoft Azure Connected Machine Agent 安全漏洞

Microsoft Azure Connected Machine Agent is a U.S.-based Microsoft Corporation's Microsoft ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A security vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker...

Mozilla Firefox ESR < 140.2

The version of Firefox ESR installed on the remote Windows host is prior to 140.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-67 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,...

Mozilla Thunderbird < 142.0

The version of Thunderbird installed on the remote Windows host is prior to 142.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-70 advisory. - Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory...

Microsoft Teams for Desktop < 25122.1415.3698.6812 Remote Code Execution (August 2025)

The version of Microsoft Teams for Desktop on the remote Windows host is prior to 25122.1415.3698.6812 It is, therefore, affected by a remote code execution vulnerability: - Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. CVE-2025-5378...

Adobe Illustrator < 28.7.9 / 29.0.0 < 29.7.0 Multiple Vulnerabilities (APSB25-74)

The version of Adobe Illustrator installed on the remote Windows host is prior to 28.7.9, 29.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-74 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2025-49564 -...

PaperCut NG 21.2 < 21.2.12 / 22.x < 22.1.1 Path Traversal

The version of PaperCut NG installed on the remote Windows host is affected by a vulnerability. A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only...

Google Chrome < 138.0.7204.183 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 138.0.7204.183. It is, therefore, affected by a vulnerability as referenced in the 202507stable-channel-update-for-desktop29 advisory. - Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a...

A-Red-Teamer-diaries

The provided context is a GitHub repository containing a Python script named RunFinger.py and a README.md file. The script is designed to gather information about the domain name and Windows machine running in the network. The README.md file contains information about the purpose of the script an...

ImageMagick < 6.9.13-26 / 7.1.0 < 7.1.2 Multiple Vulnerabilities

The remote Windows host has a version of ImageMagick installed that prior to 6.9.13-26 or 7.1 prior to 7.1.2. It is, therefore, affected by multiple vulnerabilites: - filename template issues can cause a stack overflow through vsnprintf CVE-2025-53101 - heap buffer overflow in the...

Microsoft Edge (Chromium) < 138.0.3351.95 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.95. It is, therefore, affected by multiple vulnerabilities as referenced in the July 16, 2025 advisory. - Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to...

Google Chrome < 138.0.7204.157 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 138.0.7204.157. It is, therefore, affected by multiple vulnerabilities as referenced in the 202507stable-channel-update-for-desktop15 advisory. - Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed...

Zoom Workplace for Windows < 6.4.5 / Workplace VDI for Windows < 6.3.12 Buffer Overflow (ZSB-25024)

The version of Zoom Workplace or Zoom Workplace VDI installed on the remote Windows host is prior to 6.4.5 or 6.3.12 respectively. It is, therefore, affected by a buffer overflow vulnerability as referenced in the ZSB-25024 advisory. A classic buffer overflow vulnerability in certain Zoom Clients...

Citrix Virtual Apps and Desktops Privilege Escalation (CTX694820)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2503, or prior to 2402 LTSR CU1 Update 1, or prior to 2402 LTSR CU2 Update 2. It is, therefore, affected by a privilege escalation vulnerability. By exploiting this vulnerability, a local,...

CVE-2025-36630

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

Dante Discovery < 1.2.1

The version of Dante Discovery installed on the remote Windows host is prior to 1.2.1. It is, therefore, affected by a vulnerability. mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In the...

CVE-2025-36630

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

Mozilla Thunderbird < 140.0

The version of Thunderbird installed on the remote Windows host is prior to 140.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-54 advisory. - Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory...