CVE-2019-9491

creationtimestamp| type| source ---|---|--- 2019-10-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47527 2024-10-11 21:34:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/441...

CVE-2019-8197

creationtimestamp| type| source ---|---|--- 2019-10-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47528 2025-08-31 03:01:31+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:08+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

Apple iTunes and iCloud for Windows 0-Day Exploited in Ransomware Attacks

Watch out Windows users! The cybercriminal group behind BitPaymer and iEncrypt ransomware attacks has been found exploiting a zero-day vulnerability affecting a little-known component that comes bundled with Apple's iTunes and iCloud software for Windows to evade antivirus detection. The vulnerab...

CVE-2019-1347

creationtimestamp| type| source ---|---|--- 2019-10-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47489 2019-11-17 10:47:53+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6146...

CVE-2019-1364

creationtimestamp| type| source ---|---|--- 2019-10-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47484...

CVE-2019-8717

creationtimestamp| type| source ---|---|--- 2019-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47479 2024-03-15 09:11:21+00:00| seen| https://t.me/ctinow/208524 2024-03-15 10:11:57+00:00| seen| https://t.me/ctinow/208583...

Microsoft Windows Multiple Vulnerabilities (KB4519998)

This host is missing a critical security update according to Microsoft KB4519998 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4519976)

This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft IIS Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...

Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability

A denial of service vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To...

Fedora 31 : exim (2019-e080507ba5)

This is an update fixing CVE-2019-16928. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild

Another day, another revelation of a critical unpatched zero-day vulnerability, this time in the world's most widely used mobile operating system, Android. What's more? The Android zero-day vulnerability has also been found to be exploited in the wild by the Israeli surveillance vendor NSO...

Cross site scripting

Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web reques...

Comodo Forums Hack Exposes 245,000 Users' Data — Recent vBulletin 0-day Used

If you have an account with the Comodo discussion board and support forums, also known as ITarian Forum, you should change your password immediately. Cybersecurity company Comodo has become one of the major victims of a recently disclosed vBulletin 0-day vulnerability, exposing login account...

CVE-2019-17049

NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account...

Rich Reviews <= 1.7.4 - Unauthenticated Plugin Options Update

This issue was found to be actively exploited in the wild by security vendor Wordfence. Refer to the references for further details...

Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522015)

This host is missing a critical security update according to Microsoft KB4522015 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522009)

This host is missing a critical security update according to Microsoft KB4522009 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Internet Explorer Zero-Day Flaw Addressed in Out-of-Band Security Update

Microsoft has released out-of-band security updates addressing two vulnerabilities – including an Internet Explorer zero-day vulnerability being actively exploited in the wild. The Internet Explorer zero-day vulnerability CVE-2019-1367 is a remote code execution flaw that could enable an attacker...

CVE-2019-10996

Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed...