68255 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-25153
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Barcode 0.99 contains a memory leak vulnerability in the command line processing function within cmdline.c. Attackers can exploit this vulnerability by...
Cloud Atlas activity in the first half of 2025: what changed
Known since 2014, the Cloud Atlas group targets countries in Eastern Europe and Central Asia. Infections occur via phishing emails containing a malicious document that exploits an old vulnerability in the Microsoft Office Equation Editor process CVE-2018-0802 to download and execute malicious cod...
SUSE: Security Advisory (SUSE-SU-2025:4426-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for xkbcomp
This update for xkbcomp fixes the following issues: CVE-2018-15863: NULL pointer dereference triggered by a a crafted keymap file with a no-op modmask expression can lead to a crash bsc1105832. CVE-2018-15861: NULL pointer dereference triggered by a crafted keymap file that induces an xkbinternat...
Fedora: Security Advisory (FEDORA-2025-e110b32ac7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-19629
creationtimestamp| type| source ---|---|--- 2025-12-16 09:00:04+00:00| published-proof-of-concept| Telegram/eipyR0KgNonT7wOL7ZKwmO8kNPLXykuyv2avaPuoPm3xW80...
Fedora 42 : xkbcomp (2025-e110b32ac7)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e110b32ac7 advisory. xkbcomp 1.5.0 CVE-2018-15853, CVE-2018-15859, CVE-2018-15861, CVE-2018-15863 Tenable has extracted the preceding description block directly from the...
CVE-2018-1000873
creationtimestamp| type| source ---|---|--- 2025-12-13 20:32:11+00:00| seen| https://gist.github.com/might-might/40e680f1f9ce10e8b91c6629d1f0fec9 2025-12-13 20:32:46+00:00| seen| https://gist.github.com/might-might/7893a493252338fe360077f6f10e55e2 2026-01-14 22:24:35+00:00| seen|...
CVE-2018-4063
creationtimestamp| type| source ---|---|--- 2025-12-12 20:01:43+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3m7suxjap662e 2025-12-12 23:39:34+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115709232652916760 2025-12-13 11:33:00+00:00| seen|...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2018-4063link is external Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability This type of vulnerability is a frequent...
SUSE CVE-2018-21258
An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invitepeople slash command...
Exploit for Out-of-bounds Write in Netatalk
CVE-2018-...
CVE-2018-11736
creationtimestamp| type| source ---|---|--- 2025-12-09 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m7lgxdmm6s2b 2025-12-21 09:00:05+00:00| published-proof-of-concept| Telegram/f1xIU64BPtqCo4e41cDGT7tZSg0C7tQkRZ1CwemdWGzLseM 2025-12-21 10:33:20+00:00| seen|...
📄 Android 7 / 8 / 8.1 Pointer Disclosure
A flaw in Android's Binder IPC allowed applications to craft Parcels where binder-object metadata overlapped with string data. When unmarshalling, the kernel inserted genuine kernel pointers into attacker-controlled buffers. These could then be echoed back through services like clipboard, resulti...
📄 Pluck 4.7.7-dev2 Remote Code Execution
Pluck version 4.7.7-dev2 suffers from a remote code execution vulnerability. Exploit Title: Pluck 4.7.7-dev2 - PHP Code Execution Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/pluck-cms/pluck Software Link: https://github.com/pluck-cms/pluck Version: 4.74-dev5...
Exploit for Improper Input Validation in Drupal
POC-CVE-2018-7600 Drupal vulnerable a CVE-2018-7600 Drupalge...
Pluck 4.7.7-dev2 - PHP Code Execution
Exploit Title: Pluck 4.7.7-dev2 - PHP Code Execution Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/pluck-cms/pluck Software Link: https://github.com/pluck-cms/pluck Version: 4.74-dev5 Tested on: Ubuntu Windows CVE : CVE-2018-11736 PoC: 1） 1. Log in to the Pluck...
Ubuntu: Security Advisory (USN-7913-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NTPsec < 1.1.0 DoS Vulnerability
NTPsec is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntpsec:ntpsec";...
