Microsoft .NET Framework Multiple RCE Vulnerabilities (KB4535102)

This host is missing a critical security update according to Microsoft KB4535102 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

A denial of service vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to...

CVE-2020-0009

creationtimestamp| type| source ---|---|--- 2020-01-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47921...

Citrix ADC and Gateway Remote Code Execution Vulnerability (CVE-2019-19781)

Update January 17, 2020: A new detection in Qualys Web Application Scanning was added. See "Detecting with Qualys WAS" below. Citrix released a security advisory CVE-2019-19781 for a remote code execution vulnerability in Citrix Application Delivery Controller ADC and Citrix Gateway products. The...

CVE-2019-15039

creationtimestamp| type| source ---|---|--- 2020-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47891...

CVE-2019-20354

creationtimestamp| type| source ---|---|--- 2020-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47882 2024-03-19 18:12:11+00:00| seen| https://t.me/ctinow/211780...

CVE-2019-10758

creationtimestamp| type| source ---|---|--- 2019-12-30 03:36:07+00:00| published-proof-of-concept| https://github.com/mongo-express/mongo-express/security/advisories/GHSA-h47j-hc6x-h3qq 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 23:21:18+00:00| seen|...

CVE-2019-5596

creationtimestamp| type| source ---|---|--- 2019-12-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47829 2026-07-29 12:00:44+00:00| seen| https://t.me/CVEhub/9395 2026-07-30 00:01:14+00:00| seen| https://t.me/CVEhub/9395 2026-07-31 11:00:04+00:00| published-proof-of-concept|...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host. Please refer to advisory CTX267027 for more...

Apple's Bug Bounty Opens for Business, $1M Payout Included

Apple has officially opened its historically private bug-bounty program to the public, while boosting its top payout to $1 million. Bounty hunters seeking that $1 million will need to provide a working exploit for a zero-click remote chain with full kernel execution and persistence on Apple’s...

Denial of Service Vulnerability in iPACS-5772 at Jiangsu Jinzhi Technology Co.

iPACS-5772 is a measurement and control device with remote control, telemetry, telecommunication functions, logic blocking function, programmed operation function, device self-test, time-alignment function, and the device is equipped with software time-alignment and hardware time-alignment...

Fedora 31 : openslp (2019-1e5ae33e87)

Security fix for CVE-2019-5544 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

CVE-2019-7287

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges. Recent assessments: gwillcox-r7 at November 22, 2020 2:38am UTC reported: Reported as exploited in the wild as pa...

Cross site request forgery (csrf)

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

NopCommerce 4.2.0 - Privilege Escalation

NopCommerce 4.2.0 - Privilege Escalation Vulnerability Title: NopCommerce 4.2.0 - Privilege Escalation Author: Alessandro Magnosi d3adc0de Date: 2019-07-07 Vendor Homepage: https://www.nopcommerce.com/ Software Link : https://www.nopcommerce.com/ Tested Version: 4.2.0 Vulnerability Type: Privileg...

Metasploit Sample Webapp Exploit

Exploit for python platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit sample shows how an exploit module could be written to exploit a bug in an arbitrary web server cla...

CVE-2019-18935

creationtimestamp| type| source ---|---|--- 2019-12-16 10:28:50+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3527 2019-12-17 21:25:58+00:00| published-proof-of-concept| https://t.me/antichat/7389 2019-12-17 22:22:18+00:00| published-proof-of-concept|...

The little-known ways mobile device sensors can be exploited by cybercriminals

The bevy of mobile device sensors in modern smartphones and tablets make them more akin to pocket-sized laboratories and media studios than mere communication devices. Cameras, microphones, accelerometers, and gyroscopes give incredible flexibility to app developers and utility to mobile device...

CVE-2019-16451

creationtimestamp| type| source ---|---|--- 2019-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47769 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:05+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...