CVE-2025-13485

by | Nov 21, 2025

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched...

CVE-2025-64660

by | Nov 20, 2025

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature over a network.

CVE-2025-64655

by | Nov 20, 2025

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-62459

by | Nov 20, 2025

Microsoft Defender Portal Spoofing Vulnerability

CVE-2025-62207

by | Nov 20, 2025

Azure Monitor Elevation of Privilege Vulnerability