Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerabilities (KB4011580)

This host is missing an important security update according to Microsoft KB4011580 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office Word Multiple Vulnerabilities (KB4011651)

This host is missing a critical security update according to Microsoft KB4011651. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office Compatibility Pack Service Pack 3 Multiple RCE Vulnerabilities (KB4011607)

This host is missing a critical security update according to Microsoft KB4011607 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

CVE-2017-11911

creationtimestamp| type| source ---|---|--- 2018-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43468...

CVE-2017-11893

creationtimestamp| type| source ---|---|--- 2018-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43466...

CVE-2017-11909

creationtimestamp| type| source ---|---|--- 2018-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43467...

CVE-2017-11918

creationtimestamp| type| source ---|---|--- 2018-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43469...

CVE-2017-1000432

creationtimestamp| type| source ---|---|--- 2018-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43462...

CVE-2017-13216

creationtimestamp| type| source ---|---|--- 2018-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43464...

CVE-2018-0744

creationtimestamp| type| source ---|---|--- 2018-01-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43446...

CVE-2018-3811

creationtimestamp| type| source ---|---|--- 2018-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43420 2024-06-22 09:33:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/35 2024-11-14 06:07:30+00:00| seen| MISP/fb459eb4-e55f-4828-b2f7-b9f8f11ef3c9...

CVE-2018-3810

creationtimestamp| type| source ---|---|--- 2018-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43420 2021-07-30 10:09:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/207 2024-06-22 09:33:24+00:00| published-proof-of-concept|...

CVE-2017-17215

creationtimestamp| type| source ---|---|--- 2018-01-02 09:34:49+00:00| published-proof-of-concept| https://t.me/HackerOne/1495 2018-07-20 14:59:33+00:00| exploited| https://t.me/SecLabNews/2714 2018-07-23 12:57:52+00:00| seen| MISP/5b55778d-33a8-4659-8109-1b49c30d0daa 2018-09-20 17:30:07+00:00|...

CVE-2010-1549

creationtimestamp| type| source ---|---|--- 2018-01-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43411 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hploadrunnermagentproccmdexec.rb 2025-02-06...

libraries.udmercy.edu XSS vulnerability

Open Bug Bounty ID: OBB-466377 Description| Value ---|--- Affected Website:| libraries.udmercy.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

ZKTeco ZKAccess Security System 5.3.1 Stored XSS Vulnerability

Summary ZKAccess Systems are built on flexible, open technology to provide management, real-time monitoring, and control of your access control system-all from a browser, with no additional software to install. Our secure Web-hosted infrastructure and centralized online administration reduce your...

Oracle WebLogic WSAT Remote Code Execution

The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the WSAT endpoint due to unsafe deserialization of XML encoded Java objects. An unauthenticated, remote attacker can exploit this, via a crafted Java object, to execute arbitrary Java code in the context of...

CVE-2017-15667

creationtimestamp| type| source ---|---|--- 2017-12-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43403...

Microsoft Windows jscript!NameTbl::GetValDef Use-After-Free Exploit

Exploit for windows platform in category dos / poc Windows: use-after-free in jscript!NameTbl::GetValDef CVE-2017-11903 There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this...