Apache Struts 2.x < 2.3.15.1 Multiple Vulnerabilities (S2-016) (S2-017)

The version of Apache Struts running on the remote host is 2.x prior to 2.3.15.1. It, therefore, is affected by multiple vulnerabilities including a remote command execution vulnerability and an open redirect vulnerability. Note that Nessus has not tested for these issues but has instead relied...

CVE-2018-16509

creationtimestamp| type| source ---|---|--- 2018-09-06 02:15:08+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/ghostscriptfailedrestore.rb 2018-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45369 2023-12-04...

CVE-2018-15918

creationtimestamp| type| source ---|---|--- 2018-09-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45340...

KLA11313 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Multiple serious vulnerabilities were found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An use after free vulnerabili...

Cisco Identity Services Engine Struts2 Namespace Vulnerability

According to its self-reported version, the Cisco Identity Services Engine Software is affected by a struts2 namespace vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...

CVE-2018-10900

creationtimestamp| type| source ---|---|--- 2018-08-30 15:55:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/networkmanagervpncusernameprivesc.rb 2018-08-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45313 2018-08-31...

CVE-2018-16134

creationtimestamp| type| source ---|---|--- 2018-08-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45309...

CVE-2018-16133

creationtimestamp| type| source ---|---|--- 2018-08-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45303...

CVE-2017-1000499

creationtimestamp| type| source ---|---|--- 2018-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45284...

CVE-2018-15745

creationtimestamp| type| source ---|---|--- 2018-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45296 2025-01-31 22:05:36+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/argusdvr4lficve201815745.rb 2025-02-01 23:08:24+00:00|...

CVE-2018-8353

creationtimestamp| type| source ---|---|--- 2018-08-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45279 2025-08-31 03:00:48+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Microsoft Windows - JScript RegExp.lastIndex Use-After-Free

alert'start'; var vars = ; var r = new RegExp; forvar i=0; i20000; i++ varsi = "aaaaa"; r.lastIndex = "aaaaa"; forvar i=20000; i40000;...

CVE-2018-15535

creationtimestamp| type| source ---|---|--- 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45271...

CVE-2018-15536

creationtimestamp| type| source ---|---|--- 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45271...

CVE-2018-15877

creationtimestamp| type| source ---|---|--- 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45274 2019-11-29 10:20:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpplainviewactivitymonitorrce.rb 2025-02-06...

CVE-2017-2741

creationtimestamp| type| source ---|---|--- 2018-08-24 03:56:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hpjetdirectpathtraversal.rb 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45273 2025-02-06 03:13:43+00:00...

Apache Struts Security Update (S2-057) - Version Check

Apache Struts is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-0952

creationtimestamp| type| source ---|---|--- 2018-08-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45244 2018-08-22 03:35:18+00:00| seen| https://t.me/canyoupwnme/4277 2018-08-22 04:00:51+00:00| published-proof-of-concept| https://t.me/windowshackinglibrary/178 2019-05-01...

Microsoft Windows 10 - Diagnostics Hub Standard Collector Service Privilege Escalation

Microsoft Windows 10 - Diagnostics Hub Standard Collector Service Privilege Escalation SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 20...

Microsoft Windows 10 - Diagnostics Hub Standard Collector Service Privilege Escalation

SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Summary The Diagnostics Hub Packaging library, used by Windows Standard Collector...