7100 matches found
Design/Logic Flaw
Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...
High-Severity Bug Leaves Cisco TelePresence Gear Open to Attack
Cisco Systems has patched two high-severity vulnerabilities that can be exploited by remote unauthenticated adversaries to launch denial of service attacks. Impacted are Cisco’s TelePresence Video Communication Server and the company’s ASA 5500-X Series Firewalls. The vulnerability with the wides...
Out-of-bounds Write
Thunderbird, Firefox ESR, and Firefox are vulnerable to out-of-bounds write. ClearKeyDecryptor function can be exploited by a remote attacker to cause out-of-bounds write via decrypting some Clearkey-encrypted media content. This may lead to writing of arbitrary data within memory, resulting in a...
Ad Server Patched to Stop Possible Malware Distribution
UPDATE The open-source advertising platform Revive Adserver is urging customers to patch two vulnerabilities, one of which is critical and may have been exploited to allow hackers to deliver malware to third-party websites. Revive Adserver, formerly known as OpenX Source, is a free, open-source a...
CVE-2019-11599
creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46781 2020-05-08 18:36:05+00:00| seen| https://t.me/cibsecurity/11946 2020-05-08 18:54:15+00:00| seen| https://t.me/VulnerabilityNews/14459 2024-02-15 19:17:04+00:00| seen|...
CVE-2019-10664
creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46773...
CVE-2019-10123
creationtimestamp| type| source ---|---|--- 2019-04-29 19:13:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/aiseselserverrce.rb 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46782 2025-02-06 03:13:43+00:00| seen...
CVE-2019-2725
creationtimestamp| type| source ---|---|--- 2019-04-29 05:38:37+00:00| seen| MISP/5cc68db3-cf08-48fa-b369-07fdc0a8ab16 2019-05-02 10:14:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/ajankohtaista/oracle-weblogic-palvelinohjelmiston-kriittista-haavoittuvuutta-hyvaksikaytetaan 2019-05-0...
CVE-2019-3844
creationtimestamp| type| source ---|---|--- 2019-04-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46760...
CVE-2019-5816
Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page...
CVE-2019-11537
creationtimestamp| type| source ---|---|--- 2019-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46753 2021-05-02 06:40:48+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/311...
CVE-2019-2721
creationtimestamp| type| source ---|---|--- 2019-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46747...
Billion laughs attack in c3p0
c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration...
CVE-2019-3842
creationtimestamp| type| source ---|---|--- 2019-04-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46743...
CVE-2019-8565
creationtimestamp| type| source ---|---|--- 2019-04-22 16:59:51+00:00| published-proof-of-concept| https://t.me/antichat/4586 2019-05-20 18:21:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/feedbackassistantroot.rb 2019-05-23 00:00:00+00:00|...
Design/Logic Flaw
DISPUTED An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with $a at the beginning and nested repetition operators. NOTE: t...
CVE-2019-2698
creationtimestamp| type| source ---|---|--- 2019-04-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46723...
Electrum Bitcoin wallets under siege
By Adam Thomas and Jérôme Segura, with additional contributions from Vasilios Hioueras and S!Ri Since at least late December 2018, many users of the popular Electrum Bitcoin wallet have fallen victim to a series of phishing attacks, which we estimate netted crooks well over 771 Bitcoins—an amount...