Dell iDRAC6 Command Injection (CVE-2018-1212)

The web-based diagnostics console in Dell EMC iDRAC6 Monolithic versions prior to 2.91 and Modular all versions contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially exploit this vulnerability to execute...

Dell iDRAC9 SSL/TLS Protection Not Enforced (CVE-2018-1249)

Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client and a server. This plugin only works...

Dell iDRAC7 Command Injection (CVE-2018-1244)

Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this vulnerability to execute arbitrary...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

CVE-2018-12404

creationtimestamp| type| source ---|---|--- 2024-01-15 14:41:07+00:00| seen| https://t.me/ctinow/168377...

CVE-2018-18066

creationtimestamp| type| source ---|---|--- 2024-01-15 14:11:36+00:00| seen| https://t.me/ctinow/168353...

CVE-2018-8037

creationtimestamp| type| source ---|---|--- 2024-01-15 13:36:44+00:00| seen| https://t.me/ctinow/168335...

CVE-2018-3300

creationtimestamp| type| source ---|---|--- 2024-01-15 12:37:17+00:00| seen| https://t.me/ctinow/168315...

CVE-2018-19362

creationtimestamp| type| source ---|---|--- 2024-01-15 11:36:51+00:00| seen| https://t.me/ctinow/168289...

Security Bulletin: Multiple vulnerabilities affect embedded rules in IBM Business Automation Workflow

Summary Embedded rules in IBM Business Automation Workflow are affected by multiple vulnerabilities. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2018-1000632 DESCRIPTION: dom4j could allow a remote attacker to execute arbitrary code o...

Ubuntu 16.04 ESM / 18.04 ESM : Xerces-C++ vulnerability (USN-6579-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6579-1 advisory. It was discovered that Xerces-C++ was not properly handling memory management operations when parsing XML data containing external DTDs, which could...

CVE-2018-15756

creationtimestamp| type| source ---|---|--- 2024-01-09 15:17:14+00:00| seen| https://t.me/ctinow/165047 2024-01-15 11:36:54+00:00| seen| https://t.me/ctinow/168292...

CVE-2018-14721

creationtimestamp| type| source ---|---|--- 2024-01-09 09:36:37+00:00| seen| https://t.me/ctinow/164882...

CVE-2018-2875

creationtimestamp| type| source ---|---|--- 2024-01-09 09:36:29+00:00| seen| https://t.me/ctinow/164875...

CVE-2018-8097

creationtimestamp| type| source ---|---|--- 2024-01-09 04:01:36+00:00| seen| https://t.me/arpsyndicate/2706 2025-05-28 13:55:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/38427 2025-05-28 14:18:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/38430...

GLSA-202401-11 : Apache Batik: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202401-11 Apache Batik: Multiple Vulnerabilities - In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream as the class name which then use it to call the...

Rockwell FactoryTalk Services Platform < 3.00 DoS

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 3.00. It is, therefore, affected by a vulnerability. - A remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that could lead to a...

CVE-2018-25095

creationtimestamp| type| source ---|---|--- 2024-01-08 20:26:50+00:00| seen| https://t.me/ctinow/164594 2024-01-11 21:17:17+00:00| seen| https://t.me/ctinow/166843 2024-01-25 15:11:23+00:00| seen| https://t.me/ctinow/173483...

CVE-2018-25095 Duplicator < 1.3.0 - Unauthenticated RCE

The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the server...

CVE-2018-25095

CVE-2018-25095 affects the Duplicator WordPress plugin prior to 1.3.0. The vulnerability arises from the installer script not properly escaping values when replacing them in WordPress configuration files, which could allow an attacker to execute arbitrary code on the server if the installer scrip...