CVE-2018-3080

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5991...

CVE-2018-3277

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5991...

CVE-2018-3280

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5991...

CVE-2018-3062

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5992...

Rockwell Automation Stratix Industrial Managed Ethernet Switch 7Pk Errors (CVE-2018-0155)

A vulnerability in the Bidirectional Forwarding Detection BFD offload implementation could allow an unauthenticated remote attacker to cause a crash of the iosd process, causing a DoS condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is...

Rockwell Automation Stratix Industrial Managed Ethernet Switch Improper Input Validation (CVE-2018-0174)

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected...

Rockwell Automation Stratix Industrial Managed Ethernet Switch Use of Externally-Controlled Format String (CVE-2018-0175)

A vulnerability in the LLDP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an adjacent, unauthenticated attacker to cause a DoS condition or execute arbitrary code with elevated privileges. This plugin only works with Tenable.ot. Please visit...

Race condition

A race condition in System Management Mode SMM code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation...

CVE-2023-20571

A race condition in System Management Mode SMM code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation...

CVE-2018-18535

creationtimestamp| type| source ---|---|--- 2023-11-13 02:12:30+00:00| seen| https://t.me/arpsyndicate/144...

unter-limit.de Improper Access Control vulnerability OBB-3777640

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2018-8210

creationtimestamp| type| source ---|---|--- 2023-11-12 03:34:21+00:00| seen| https://t.me/arpsyndicate/113...

CVE-2018-8213

creationtimestamp| type| source ---|---|--- 2023-11-12 03:34:21+00:00| seen| https://t.me/arpsyndicate/113...

CVE-2018-18619

creationtimestamp| type| source ---|---|--- 2023-11-12 03:26:43+00:00| seen| https://t.me/arpsyndicate/112 2023-12-04 12:29:08+00:00| seen| https://t.me/arpsyndicate/1204...

CVE-2018-3181

creationtimestamp| type| source ---|---|--- 2023-11-10 15:34:11+00:00| published-proof-of-concept| https://t.me/CNArsenal/1479 2023-11-11 07:49:11+00:00| published-proof-of-concept| https://t.me/v3n0mhack/301...

CVE-2018-8863 Philips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor

The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information...

CVE-2018-8863 Philips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor

The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information...

CVE-2018-8863

CVE-2018-8863 affects Philips EncoreAnywhere (APAC hosted web app); vulnerability arises from an HTTP header that exposes data enabling information disclosure. Affected product/version: EncoreAnywhere 2.36.3.3 or earlier. Impact: confidentiality impact (data exposure); CVSSv3 base score 5.9 (scor...

CVE-2018-6574

creationtimestamp| type| source ---|---|--- 2023-11-09 06:13:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5730 2023-11-10 01:09:41+00:00| seen| https://t.me/arpsyndicate/38 2023-11-10 21:36:39+00:00| seen| https://t.me/arpsyndicate/58 2023-12-10 16:40:21+00:00| seen|...

USN-6473-1: urllib3 vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 22.04 Description It was discovered that urllib3 didn’t strip HTTP Authorization header on cross-origin redirects. A remote attacker could possibly use this issue to obtain sensitive information. Thi...