CVE-2018-6329

creationtimestamp| type| source ---|---|--- 2018-11-28 02:34:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/uebbpserverdprivesc.rb 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45913 2025-02-06 03:13:43+00:00|...

CVE-2016-1555

creationtimestamp| type| source ---|---|--- 2018-11-26 17:56:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgearunauthexec.rb 2018-11-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45909 2020-01-08 13:22:45+00:00| seen|...

Critical WordPress Plugin Flaw Grants Admin Access to Any Registered Site User

Another day, another critical WordPress plugin vulnerability. The popular AMP for WP plugin, which helps WordPress sites load faster on mobile browsers, has a privilege-escalation flaw that allows WordPress site users of any level to make administrative changes to a website. The plugin, which has...

Microsoft Exchange Server Elevation of Privilege Vulnerability (November 2018)

The Microsoft Exchange install on the remote host contains an unspecified flaw that allows an authenticated, man-in-the-middle attacker to impersonate another user and escalate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

CVE-2018-8552

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402 2018-11-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45924...

63 New Flaws (Including 0-Days) Windows Users Need to Patch Now

It's Patch Tuesday once again…time for another round of security updates for the Windows operating system and other Microsoft products. This month Windows users and system administrators need to immediately take care of a total of 63 security vulnerabilities, of which 12 are rated critical, 49...

CVE-2018-8589

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka “Windows Win32k Elevation of Privilege Vulnerability.” This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. Recent assessments: gwillcox-r7 at November 22, 2020 3:02am UTC...

Microsoft Skype for Business Denial of Service Vulnerability

A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker's user rights. For an...

Security Updates for Microsoft Excel Products (November 2018)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Android RSSI Broadcast Information Disclosure

Blog post here: https://wwws.nightwatchcybersecurity.com/2018/11/11/cve-2018-9581/ NOTE: This bug is part of a series of three related Android bugs with the same root cause: CVE-2018-9489, CVE-2018-9581 and CVE-2018-15835. A presentation covering all three bugs was given at BSides DE in the fall ...

CVE-2017-1000083

creationtimestamp| type| source ---|---|--- 2018-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45824 2019-02-07 00:11:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/evincecbtcmdinjection.rb 2019-02-11...

CVE-2018-19207

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

CVE-2018-15437

creationtimestamp| type| source ---|---|--- 2018-11-12 17:11:01+00:00| seen| MISP/5be9b392-fdc8-419c-ab52-48a10a021402 2018-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45829...

CVE-2018-7080

creationtimestamp| type| source ---|---|--- 2018-11-07 10:23:58+00:00| exploited| https://t.me/thehackernews/122...

CVE-2018-4367

creationtimestamp| type| source ---|---|--- 2018-11-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45787...

CVE-2018-4366

creationtimestamp| type| source ---|---|--- 2018-11-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45788...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild

Attackers are actively exploiting a zero-day vulnerability in certain Cisco security products, to cause a denial-of-service DoS condition. The as-yet-unpatched flaw CVE-2018-15454 has an 8.6 CVSS score and is rated high-severity. It exists in the Session Initiation Protocol SIP inspection engine ...

CVE-2018-11759

creationtimestamp| type| source ---|---|--- 2018-10-31 23:59:05+00:00| seen| https://t.me/ctinow/4350 2018-11-04 21:21:20+00:00| seen| https://t.me/canyoupwnme/4681 2018-11-04 21:32:22+00:00| published-proof-of-concept| https://t.me/antichat/2511 2024-10-28 00:00:00+00:00| seen| The Shadowserver...