7100 matches found
CVE-2018-4382
creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45911...
CVE-2018-4386
creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45912 2020-01-04 15:28:35+00:00| published-proof-of-concept| https://t.me/antichat/7551 2025-07-03 21:00:04+00:00| published-proof-of-concept|...
Infogram: User account blocking by Internal Server error
If you send a language=en in https://infogram.com/api/users/me user be forever get an Internal Server error EVEN AFTER re-logining: https://youtu.be/AxYa11lEiWA I idk why does hackerone can't upload this video so I uploaded this video privately to the youtube! In this video, I'm trying to relogin...
CVE-2018-6329
creationtimestamp| type| source ---|---|--- 2018-11-28 02:34:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/uebbpserverdprivesc.rb 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45913 2025-02-06 03:13:43+00:00|...
CVE-2016-1555
creationtimestamp| type| source ---|---|--- 2018-11-26 17:56:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgearunauthexec.rb 2018-11-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45909 2020-01-08 13:22:45+00:00| seen|...
Critical WordPress Plugin Flaw Grants Admin Access to Any Registered Site User
Another day, another critical WordPress plugin vulnerability. The popular AMP for WP plugin, which helps WordPress sites load faster on mobile browsers, has a privilege-escalation flaw that allows WordPress site users of any level to make administrative changes to a website. The plugin, which has...
Microsoft Exchange Server Elevation of Privilege Vulnerability (November 2018)
The Microsoft Exchange install on the remote host contains an unspecified flaw that allows an authenticated, man-in-the-middle attacker to impersonate another user and escalate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...
CVE-2018-8552
creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402 2018-11-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45924...
63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
It's Patch Tuesday once again…time for another round of security updates for the Windows operating system and other Microsoft products. This month Windows users and system administrators need to immediately take care of a total of 63 security vulnerabilities, of which 12 are rated critical, 49...
CVE-2018-8589
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka “Windows Win32k Elevation of Privilege Vulnerability.” This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. Recent assessments: gwillcox-r7 at November 22, 2020 3:02am UTC...
Microsoft Skype for Business Denial of Service Vulnerability
A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker's user rights. For an...
Android RSSI Broadcast Information Disclosure
Blog post here: https://wwws.nightwatchcybersecurity.com/2018/11/11/cve-2018-9581/ NOTE: This bug is part of a series of three related Android bugs with the same root cause: CVE-2018-9489, CVE-2018-9581 and CVE-2018-15835. A presentation covering all three bugs was given at BSides DE in the fall ...
CVE-2017-1000083
creationtimestamp| type| source ---|---|--- 2018-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45824 2019-02-07 00:11:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/evincecbtcmdinjection.rb 2019-02-11...
Security Updates for Microsoft Excel Products (November 2018)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...
CVE-2018-19207
The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...
CVE-2018-15437
creationtimestamp| type| source ---|---|--- 2018-11-12 17:11:01+00:00| seen| MISP/5be9b392-fdc8-419c-ab52-48a10a021402 2018-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45829...
CVE-2018-7080
creationtimestamp| type| source ---|---|--- 2018-11-07 10:23:58+00:00| exploited| https://t.me/thehackernews/122...
CVE-2018-4366
creationtimestamp| type| source ---|---|--- 2018-11-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45788...
CVE-2018-4367
creationtimestamp| type| source ---|---|--- 2018-11-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45787...
CVE-2018-18956
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...