CVE-2018-3810

creationtimestamp| type| source ---|---|--- 2018-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43420 2021-07-30 10:09:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/207 2024-06-22 09:33:24+00:00| published-proof-of-concept|...

CVE-2017-17215

creationtimestamp| type| source ---|---|--- 2018-01-02 09:34:49+00:00| published-proof-of-concept| https://t.me/HackerOne/1495 2018-07-20 14:59:33+00:00| exploited| https://t.me/SecLabNews/2714 2018-07-23 12:57:52+00:00| seen| MISP/5b55778d-33a8-4659-8109-1b49c30d0daa 2018-09-20 17:30:07+00:00|...

CVE-2017-15944

creationtimestamp| type| source ---|---|--- 2017-12-13 09:00:49+00:00| seen| https://t.me/canyoupwnme/2863 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43342 2018-05-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44597 2018-05-29 15:50:33+00:00| see...

CVE-2017-12635

creationtimestamp| type| source ---|---|--- 2017-11-15 18:37:29+00:00| seen| https://t.me/informationsecuritychannel/11091 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/couchdb/couchdbenum.rb 2018-07-12 08:56:07+00:00| seen|...

Microsoft SharePoint Enterprise Server 2016 Remote Code Execution Vulnerability (KB4011217)

This host is missing an important security update according to Microsoft KB4011217 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Word 2010 Service Pack 2 Remote Code Execution Vulnerability (KB3213630)

This host is missing an important security update according to Microsoft KB3213630 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB3213555)

This host is missing an important security update according to Microsoft KB3213555 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

The Stack Clash

What is the Stack Clash? The Stack Clash is a vulnerability in the memory management of several operating systems. It affects Linux, OpenBSD, NetBSD, FreeBSD and Solaris, on i386 and amd64. It can be exploited by attackers to corrupt memory and execute arbitrary code. Qualys researchers discovere...

Threat Round-up for May 19 - May 26

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between May 19 and May 26. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior characteristics,...

Ubuntu: Security Advisory (USN-3272-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5607

creationtimestamp| type| source ---|---|--- 2017-03-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41779...

Cisco Unified Communications Manager IM and Presence Service Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability

Cisco Unified Communications Manager IM and Presence Service is prone to a vulnerability in Apache Struts2. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco Unified Communications Manager Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability (cisco-sa-20170310-struts2)

Cisco Unified Communications Manager is prone to a vulnerability in Apache Struts2. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2013-6627

creationtimestamp| type| source ---|---|--- 2016-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40944...

CVE-2016-5309

creationtimestamp| type| source ---|---|--- 2016-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40405...

Insecure Redis Instances at Core of Attacks Against Linux Servers

A recent run of attacks against Linux servers called Fairware has been traced to insecure internet-facing Redis installations that hackers have abused to delete web folders and, in some cases, install malicious code. Redis is an open source tool used by web application developers for the purpose ...

Overload: Critical Lessons from 15 Years of ICS Vulnerabilities

In the past several years, a flood of vulnerabilities has hit industrial control systems ICS – the technological backbone of electric grids, water supplies, and production lines. These vulnerabilities affect the reliable operation of sensors, programmable controllers, software and networking...

Oracle: Security Advisory (ELSA-2016-0676)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scourge of Android Overlay Malware on Rise

The black market for malicious Android software is heating up thanks to a rise in popularity of overlay malware, which can siphon credentials off Android devices and give crooks a tool to defeat two-factor identification schemes, according to security researchers at IBM’s X-Force. Overlay malware...

Adobe Air Security Update (APSB16-08) - Mac OS X

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...