Scourge of Android Overlay Malware on Rise

The black market for malicious Android software is heating up thanks to a rise in popularity of overlay malware, which can siphon credentials off Android devices and give crooks a tool to defeat two-factor identification schemes, according to security researchers at IBM’s X-Force. Overlay malware...

CVE-2016-0145

creationtimestamp| type| source ---|---|--- 2016-04-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39743 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen|...

CVE-2016-0151

creationtimestamp| type| source ---|---|--- 2016-04-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39740 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:29:47+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971470 2025-02-23...

CVE-2016-0891

creationtimestamp| type| source ---|---|--- 2016-04-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39738...

Oracle Java SE Multiple Vulnerabilities (April 2016 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 91, 7 Update 101, or 6 Update 115. It is, therefore, affected by security vulnerabilities in the following subcomponents : - 2D - Deployment - Hotspot - JAXP - JCE - JMX - Security -...

CVE-2016-0143

creationtimestamp| type| source ---|---|--- 2016-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39712 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2023-12-03 11:10:15+00:00| seen| https://t.me/arpsyndicate/918 2025-02-14 10:00:27+00:00| seen|...

CVE-2015-9266

creationtimestamp| type| source ---|---|--- 2016-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39701 2018-09-06 00:16:20+00:00| seen| https://t.me/cibsecurity/30 2019-08-30 17:03:25+00:00| seen|...

CVE-2016-0122

creationtimestamp| type| source ---|---|--- 2016-04-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39694...

CVE-2015-6086

creationtimestamp| type| source ---|---|--- 2016-04-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39698...

CVE-2016-0492

creationtimestamp| type| source ---|---|--- 2016-04-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39691 2016-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39852 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-0165

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka “Win32k Elevation of Privilege...

CVE-2016-0167

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka “Win32k Elevation of Privilege...

CVE-2016-0846

creationtimestamp| type| source ---|---|--- 2016-04-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39686...

CVE-2016-2417

creationtimestamp| type| source ---|---|--- 2016-04-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39685...

Security update for flash-player (important)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

CVE-2016-1019

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

UBUNTU-CVE-2016-1019

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

Code injection

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

CVE-2016-1019

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

CVE-2016-1560

creationtimestamp| type| source ---|---|--- 2016-04-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41680 2016-08-23 13:23:26+00:00| seen| MISP/57b5892a-bfd8-49f1-8d6b-4a3d950d210f 2018-05-29 15:50:33+00:00| seen|...