CVE-2018-8735

creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44560 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagiosxichainedrce.rb 2018-06-29 17:22:27+00:00| seen...

CVE-2018-10468

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

Drupal Core Critical RCE Vulnerability (SA-CORE-2018-004) - Linux

Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; if...

DRUPAL-CORE-2018-004

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical -...

Integer overflow

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical -...

drupal -- Drupal Core - Multiple Vulnerabilities

Drupal Security Team reports: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to...

CVE-2018-4935

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44527 2025-08-31 03:01:24+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-4937

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44529 2025-08-31 03:01:27+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-4934

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44528 2025-08-31 03:01:26+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-4936

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44526 2025-08-31 03:01:24+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-9857

creationtimestamp| type| source ---|---|--- 2018-04-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44486...

CVE-2018-0971

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44461...

CVE-2018-0968

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44465...

CVE-2018-0974

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44464...

CVE-2018-0969

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44459...

CVE-2018-0970

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44460...

Drupalgeddon 2.0: Are Hackers Slacking Off?

Ever since March 28th, when Drupal published a patch for a RCE named Drupalgeddon 2.0 SA-CORE-2018-002/CVE-2018-7600, Imperva has been monitoring our cloud looking for hackers’ attempts to exploit the vulnerability, but found nothing. Until today. It somehow seems fitting that nefarious activity...

Adobe ColdFusion 11.x < 11u14 / 2016.x < 2016u6 Multiple Vulnerabilities (APSB18-14)

The version of Adobe ColdFusion running on the remote Windows host is 11.x prior to update 14 or 2016.x prior to update 6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109017; scriptversion"1.9";...

CVE-2018-1273

creationtimestamp| type| source ---|---|--- 2018-04-11 20:15:28+00:00| seen| https://t.me/canyoupwnme/3562 2018-12-11 15:50:28+00:00| seen| MISP/5c0fd6cc-f868-4dca-890c-1ea30a021402 2020-10-09 15:40:34+00:00| seen| MISP/1e58e188-7443-497f-a296-717763199581 2023-06-14 21:10:03+00:00| seen|...