Cross site request forgery (csrf)

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

Metasploit Sample Webapp Exploit

Exploit for python platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit sample shows how an exploit module could be written to exploit a bug in an arbitrary web server cla...

NopCommerce 4.2.0 - Privilege Escalation

NopCommerce 4.2.0 - Privilege Escalation Vulnerability Title: NopCommerce 4.2.0 - Privilege Escalation Author: Alessandro Magnosi d3adc0de Date: 2019-07-07 Vendor Homepage: https://www.nopcommerce.com/ Software Link : https://www.nopcommerce.com/ Tested Version: 4.2.0 Vulnerability Type: Privileg...

CVE-2019-18935

creationtimestamp| type| source ---|---|--- 2019-12-16 10:28:50+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3527 2019-12-17 21:25:58+00:00| published-proof-of-concept| https://t.me/antichat/7389 2019-12-17 22:22:18+00:00| published-proof-of-concept|...

The little-known ways mobile device sensors can be exploited by cybercriminals

The bevy of mobile device sensors in modern smartphones and tablets make them more akin to pocket-sized laboratories and media studios than mere communication devices. Cameras, microphones, accelerometers, and gyroscopes give incredible flexibility to app developers and utility to mobile device...

CVE-2019-16451

creationtimestamp| type| source ---|---|--- 2019-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47769 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:05+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

Microsoft SQL Server Reporting Services XSS Vulnerability

A cross-site scripting XSS vulnerability exists when Microsoft SQL Server Reporting Services SSRS does not properly sanitize a specially-crafted web request to an affected SSRS server. An attacker who successfully exploited the vulnerability could run scripts in the context of the targeted user...

New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...

CVE-2019-15627

creationtimestamp| type| source ---|---|--- 2019-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47751...

CVE-2018-9022

creationtimestamp| type| source ---|---|--- 2019-12-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47748 2024-09-05 22:14:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/177...

‘StrandHogg’ Vulnerability Allows Malware to Pose as Legitimate Android Apps

Researchers have discovered a new Android vulnerability that could allow malware to pose as popular apps and ask for various permissions, potentially allowing hackers to listen in on users, take photos, read and send SMS messages, and basically take over various functions as if they are the...

D-Link DNS-320 Remote Command Injection Vulnerability - Active Check

The D-Link DNS-320 NAS-device is prone to a remote command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

CVE-2011-3600

creationtimestamp| type| source ---|---|--- 2019-11-26 08:57:30+00:00| seen| https://t.me/cibsecurity/8324 2024-10-25 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-25 2024-10-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-26...

CVE-2019-2633

creationtimestamp| type| source ---|---|--- 2019-11-20 14:03:45+00:00| exploited| https://t.me/SecLabNews/6263...

CVE-2019-15793

creationtimestamp| type| source ---|---|--- 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47693...

CVE-2019-15792

creationtimestamp| type| source ---|---|--- 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47693...

CVE-2019-15794

creationtimestamp| type| source ---|---|--- 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47692 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

No nonce protection on form submissions leading to CSRF and no input/output sanitization allowing for XSS when CSRF is exploited. PoC...

FreeBSD -- Machine Check Exception on Page Size Change

Intel discovered a previously published erratum on some Intel platforms can be exploited by malicious software to potentially cause a denial of service by triggering a machine check that will crash or hang the system. Malicious guest operating systems may be able to crash the host...