7100 matches found
Windows Runtime Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...
Denial Of Service (DoS)
Mozilla is vulnerable to denial of serviceDoS. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...
CVE-2020-13379
creationtimestamp| type| source ---|---|--- 2020-08-01 19:07:21+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/4526 2020-08-03 04:31:10+00:00| published-proof-of-concept| https://t.me/cKure/1649 2020-09-09 06:35:17+00:00| published-proof-of-concept|...
CVE-2020-11579
creationtimestamp| type| source ---|---|--- 2020-07-30 09:59:08+00:00| published-proof-of-concept| https://t.me/cKure/1571 2020-09-03 22:55:16+00:00| seen| https://t.me/cibsecurity/14466 2020-12-30 15:05:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1500 2022-06-09...
Default configuration
In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's...
GHSA-67J9-C52G-W2Q9 Authorization Bypass in I hate money
Impact An authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's private code. With the default...
Attackers Exploiting High-Severity Network Security Flaw, Cisco Warns
Cisco is warning that a high-severity flaw in its network security software is being actively exploited – allowing remote, unauthenticated attackers to access sensitive data. Patches for the vulnerability CVE-2020-3452 in question, which ranks 7.5 out of 10 on the CVSS scale, were released last...
CVE-2020-3452
creationtimestamp| type| source ---|---|--- 2020-07-23 07:00:58+00:00| published-proof-of-concept| https://t.me/cKure/1426 2020-07-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=497 2020-07-25 13:49:40+00:00| exploited| https://t.me/informationsecuritychannel/39455...
RHEL 8 : .NET Core (RHSA-2020:2988)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2988 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
CVE-2019-12725
creationtimestamp| type| source ---|---|--- 2020-07-19 19:18:25+00:00| exploited| https://t.me/cKure/1360 2020-10-09 13:27:00+00:00| seen| MISP/99de2314-4625-4a10-aed6-a4b78fc7c6a8 2020-11-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49096 2021-05-13 09:27:48+00:00| seen|...
Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-65603)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Microsoft Windows/Windo...
Microsoft DNS Server Remote Code Execution (SIGRed)
According to its self-reported version number, the Microsoft DNS Server running on the remote host is affected by a remote code execution vulnerability. An unauthenticated, remote attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System...
CVE-2019-12784
creationtimestamp| type| source ---|---|--- 2020-07-15 00:46:07+00:00| exploited| https://t.me/VulnerabilityNews/15892 2020-07-15 00:55:07+00:00| seen| https://t.me/cibsecurity/13469 2020-07-15 00:55:08+00:00| seen| https://t.me/cibsecurity/13470...
CVE-2019-12783
creationtimestamp| type| source ---|---|--- 2020-07-15 00:46:06+00:00| exploited| https://t.me/VulnerabilityNews/15891 2020-07-15 00:55:07+00:00| seen| https://t.me/cibsecurity/13469 2020-07-15 00:55:08+00:00| seen| https://t.me/cibsecurity/13470...
Windows Lockscreen Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog. An attacker who successfully exploited the vulnerability could execute commands with elevated permissions. The security update addresses the vulnerability by ensuring that the Ea...
CVE-2020-8193
creationtimestamp| type| source ---|---|--- 2020-07-11 15:39:26+00:00| published-proof-of-concept| Telegram/HFcMUewjNmGZHFQM6L589-YD7TF0J3Yls8VWINDjwu9WQ 2020-07-16 10:00:46+00:00| published-proof-of-concept| https://t.me/misteam/169 2020-07-16 16:04:38+00:00| published-proof-of-concept|...
Adning Advertising < 1.5.6 - Unauthenticated Arbitrary File Upload/Deletion
The issue is being actively exploited, and could allow unauthorised attackers to upload/delete arbitrary files...
CVE-2020-15505
A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier that...
F5 BIG-IP Remote Code Execution Vulnerability (CVE-2020-5902)
Update July 10, 2020: F5 updated their mitigation section of security advisory on July 8, 2020 at 17:00 Pacific time, and provided a new mitigation mechanism to help customers mitigate currently known unauthenticated exploits. Qualys also updated QID 38791 to reflect these changes and are availab...