CVE-2015-7611

creationtimestamp| type| source ---|---|--- 2020-02-20 09:52:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/apachejamesexec.rb 2020-02-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48130 2025-02-06 03:13:42+00:00| seen|...

U.S. Dept Of Defense: Admin Login Credential Leak for DoD Gitlab EE instance

Summary A DoD employee/contractor exposed the ███ password in a GitHub repository █████████ leading to full ███ access in a DoD DISA-associated private Gitlab EE instance ███. Description The IP address ████ recently hosted the subdomain █████████ as of 2019-09-23. ██████ Now port 80 points to a...

Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download

The issue is being actively exploited, and allows attackers to download arbitrary files, such as the wp-config.php file. According to the vendor, the vulnerability was only in two versions v1.3.24 and v1.3.26, the vulnerability wasn't present in versions 1.3.22 and before. PoC...

Unraid OS < 6.8.1 Web UI RCE Vulnerability - Active Check

Unraid OS is prone to a remote code execution RCE vulnerability in the Web UI. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows Multiple Vulnerabilities (KB4537764)

This host is missing a critical security update according to Microsoft KB4537764 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-18915

creationtimestamp| type| source ---|---|--- 2020-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48057...

Design/Logic Flaw

A vulnerability has been identified in SCALANCE S602 All versions V4.1, SCALANCE S612 All versions V4.1, SCALANCE S623 All versions V4.1, SCALANCE S627-2M All versions V4.1, SCALANCE X-200 switch family incl. SIPLUS NET variants All versions 5.2.4, SCALANCE X-200IRT switch family incl. SIPLUS NET...

Eyes Of Network (EON) <= 5.3 Multiple Vulnerabilities

Eyes Of Network EON is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Eyes Of Network (EON) <= 2.4.2 Multiple API Vulnerabilities

Eyes Of Network EON is prone to multiple vulnerabilities over the API. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unrestricted file upload

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute...

CVE-2019-15975

creationtimestamp| type| source ---|---|--- 2020-02-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48018 2021-06-24 16:07:15+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/ciscodcnmauthbypass.rb 2024-03-19...

CVE-2019-15977

creationtimestamp| type| source ---|---|--- 2020-02-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48020 2024-03-19 15:16:48+00:00| seen| https://t.me/ctinow/211577...

CVE-2019-15976

creationtimestamp| type| source ---|---|--- 2020-02-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48019 2024-03-19 15:16:47+00:00| seen| https://t.me/ctinow/211576...

CVE-2018-11479

creationtimestamp| type| source ---|---|--- 2020-02-05 18:50:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/windscribewindscribeserviceprivesc.rb 2020-02-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48021 2023-12-22...

Hackers Exploited Twitter Bug to Find Linked Phone Numbers of Users

Twitter today issued a warning revealing that attackers abused a legitimate functionality on its platform to unauthorizedly determine phone numbers associated with millions of its users' accounts. According to Twitter, the vulnerability resided in one of the APIs that has been designed to make it...

CVE-2019-19509

creationtimestamp| type| source ---|---|--- 2020-01-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47982 2020-03-16 11:28:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/rconfigajaxarchivefilesrce.rb 2020-03-17...

CVE-2014-3445

creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:44+00:00| exploited| https://t.me/cveNotify/516...

CVE-2020-0549

creationtimestamp| type| source ---|---|--- 2020-01-28 08:37:51+00:00| seen| https://t.me/cveNotify/502 2020-01-28 10:30:18+00:00| published-proof-of-concept| https://t.me/cybershit/663 2020-01-29 20:11:34+00:00| seen| https://t.me/thehackernews/585 2020-01-31 10:14:26+00:00| seen|...

CVE-2020-7991

creationtimestamp| type| source ---|---|--- 2020-01-27 01:37:40+00:00| seen| https://t.me/cveNotify/420 2020-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47966...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (ADV200001)

This host is missing a critical security update according to Microsoft advisory ADV200001. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...