1274 matches found
PaperCut NG 21.2 < 21.2.12 / 22.x < 22.1.1 Path Traversal
The version of PaperCut NG installed on the remote Windows host is affected by a vulnerability. A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only...
Google Chrome < 138.0.7204.183 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 138.0.7204.183. It is, therefore, affected by a vulnerability as referenced in the 202507stable-channel-update-for-desktop29 advisory. - Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a...
A-Red-Teamer-diaries
The provided context is a GitHub repository containing a Python script named RunFinger.py and a README.md file. The script is designed to gather information about the domain name and Windows machine running in the network. The README.md file contains information about the purpose of the script an...
ImageMagick < 6.9.13-26 / 7.1.0 < 7.1.2 Multiple Vulnerabilities
The remote Windows host has a version of ImageMagick installed that prior to 6.9.13-26 or 7.1 prior to 7.1.2. It is, therefore, affected by multiple vulnerabilites: - filename template issues can cause a stack overflow through vsnprintf CVE-2025-53101 - heap buffer overflow in the...
Microsoft Edge (Chromium) < 138.0.3351.95 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.95. It is, therefore, affected by multiple vulnerabilities as referenced in the July 16, 2025 advisory. - Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to...
Google Chrome < 138.0.7204.157 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 138.0.7204.157. It is, therefore, affected by multiple vulnerabilities as referenced in the 202507stable-channel-update-for-desktop15 advisory. - Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed...
Zoom Workplace for Windows < 6.4.5 / Workplace VDI for Windows < 6.3.12 Buffer Overflow (ZSB-25024)
The version of Zoom Workplace or Zoom Workplace VDI installed on the remote Windows host is prior to 6.4.5 or 6.3.12 respectively. It is, therefore, affected by a buffer overflow vulnerability as referenced in the ZSB-25024 advisory. A classic buffer overflow vulnerability in certain Zoom Clients...
Citrix Virtual Apps and Desktops Privilege Escalation (CTX694820)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2503, or prior to 2402 LTSR CU1 Update 1, or prior to 2402 LTSR CU2 Update 2. It is, therefore, affected by a privilege escalation vulnerability. By exploiting this vulnerability, a local,...
CVE-2025-36630
In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...
Dante Discovery < 1.2.1
The version of Dante Discovery installed on the remote Windows host is prior to 1.2.1. It is, therefore, affected by a vulnerability. mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In the...
CVE-2025-36630
In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...
Mozilla Thunderbird < 140.0
The version of Thunderbird installed on the remote Windows host is prior to 140.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-54 advisory. - Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory...
CVE-2025-36630
CVE-2025-36630 affects Tenable Nessus on Windows, prior to version 10.8.5. A nonāadministrative user could overwrite arbitrary local system files with log content, achieving SYSTEM privilege. Root cause details are not explicitly provided in the documents; exploitation status is not detailed. The...
Google Chrome < 138.0.7204.96 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 138.0.7204.96. It is, therefore, affected by a vulnerability as referenced in the 202506stable-channel-update-for-desktop30 advisory. - Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote...
CVE-2025-36632
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege...
CVE-2025-36632
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege...
CVE-2025-36632 Local Privilege Escalation
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege...
PT-2025-25558 Ā· Tenable Ā· Tenable Agent
Name of the Vulnerable Software and Affected Versions: Tenable Agent versions prior to 10.8.5 Description: A security issue was discovered where a non-administrative user could execute code with SYSTEM privilege on a Windows host. Recommendations: For versions prior to 10.8.5, update to version...
CVE-2025-36631
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...
CVE-2025-36633
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation...