CVE-2018-4442

creationtimestamp| type| source ---|---|--- 2019-01-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46183...

CVE-2017-18357

creationtimestamp| type| source ---|---|--- 2019-01-15 18:57:32+00:00| seen| https://t.me/cibsecurity/2037 2019-05-17 23:32:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/shopwarecreateinstancefromnamedargumentsrce.rb 2019-05-23...

CVE-2018-5410

creationtimestamp| type| source ---|---|--- 2019-01-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46155...

CVE-2019-0571

creationtimestamp| type| source ---|---|--- 2019-01-09 14:53:48+00:00| seen| MISP/5c360a14-9018-4d13-b6c9-714c0a021402 2019-01-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46159...

Patch Tuesday, January 2019 Edition

Microsoft on Tuesday released updates to fix roughly four dozen security issues with its Windows operating systems and related software. All things considered, this first Patch Tuesday of 2019 is fairly mild, bereft as it is of any new Adobe Flash updates or zero-day exploits. But there are a few...

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB2596760)

This host is missing an important security update according to Microsoft KB2596760 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB3172522)

This host is missing an important security update according to Microsoft KB3172522 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4480961)

This host is missing a critical security update according to Microsoft KB4480961 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Updates for Internet Explorer (January 2019)

The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input. An attacker could execute arbitrary code in...

Rockstar Games: CSRF Vulnerability on https://signin.rockstargames.com/tpa/facebook/link/

In this report, the researcher identified a Cross-Site Request Forgery vulnerability that could have allowed attackers to link a Facebook account to another user's Social Club account, and thus gain the ability to log in as the victim. We implemented an anti-CSRF token as part of the...

CVE-2018-4443

creationtimestamp| type| source ---|---|--- 2019-01-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46071...

CVE-2018-4441

creationtimestamp| type| source ---|---|--- 2019-01-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46072 2019-03-09 15:42:25+00:00| published-proof-of-concept| https://t.me/antichat/3906 2019-03-10 14:54:45+00:00| published-proof-of-concept| https://t.me/antichat/3910 2019-03-1...

CVE-2018-1160

creationtimestamp| type| source ---|---|--- 2018-12-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46048 2018-12-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46034 2019-04-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46675 2019-12-19...

Design/Logic Flaw

PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. AdminVictim views user in admin-panel and gets...

CVE-2018-1000870

PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. AdminVictim views user in admin-panel and gets...

Scripting Engine Memory Corruption Vulnerability (KB4483228)

This host is missing an important security update according to Microsoft KB4483228 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-8619

creationtimestamp| type| source ---|---|--- 2018-12-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46023 2023-04-16 12:26:20+00:00| exploited| https://t.me/CyberSecurityTechnologies/130...

CVE-2018-8653

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka “Scripting Engine Memory Corruption Vulnerability.” This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

CVE-2018-8631

creationtimestamp| type| source ---|---|--- 2018-12-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46001...

CVE-2018-4404

creationtimestamp| type| source ---|---|--- 2018-12-13 19:58:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safariproxyobjecttypeconfusion.rb 2018-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45998 2024-05-31...