7000 matches found
Microsoft and Google Collaborate on Effort to Clean Web of Cild Abuse Images
Microsoft and Google are cooperating in an effort to make it much more difficult for child predators to find illegal images online by blocking search results for about 100,000 search terms. The companies also are collaborating on methods to better identify illegal abuse images and remove them mor...
Microsoft Windows ActiveX Control RCE Vulnerability (2900986)
This host is missing a critical security update according to Microsoft Bulletin MS13-090. OpenVAS Vulnerability Test $Id: secpodms13-090.nasl 6074 2017-05-05 09:03:14Z teissa $ Microsoft Windows ActiveX Control RCE Vulnerability 2900986 Authors: Veerendra G.G Copyright: Copyright C 2013 SecPod,...
CVE-2013-6873
creationtimestamp| type| source ---|---|--- 2013-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38842...
Out-of-bounds
The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remo...
IE Zero Day Patch Already in November Patch Tuesday Updates
Microsoft announced this afternoon that the zero-day vulnerability being exploited in a watering hole attack against an unnamed U.S.-based NGO website was already scheduled to be patched in a cumulative Internet Explorer update tomorrow. The zero-day was reported publicly on Friday by FireEye...
Microsoft Tagged Image File Format Heap Overflow
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a...
CVE-2013-6792
creationtimestamp| type| source ---|---|--- 2013-11-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38821...
Authentication flaw
The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlsetroodkcableoj28840ybtide...
Backdoor found in Chinese Tenda Wireless Routers, allows Root access to Hackers
Last week Craig Heffner, specialized on the embedded device hacking exposed a serious backdoor in number of D-Link routers allows unauthorized backdoor access. Recently he published his another researcher, Titled 'From China, With Love', exposed that D-Link is not only the vendor who puts backdoo...
CVE-2013-3827
creationtimestamp| type| source ---|---|--- 2013-10-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38802 2021-08-26 22:56:33+00:00| seen| https://t.me/ctinow/39049 2025-07-08 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hom652w...
CVE-2013-6129
creationtimestamp| type| source ---|---|--- 2013-10-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38785 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/vbulletinupgradeadmin.rb 2025-02-06 03:13:41+00:00|...
CVE-2013-6826
creationtimestamp| type| source ---|---|--- 2013-10-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38824...
CVE-2013-4034
creationtimestamp| type| source ---|---|--- 2013-10-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38825...
Memory corruption
Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript code that uses the onpropertychange event handler, as exploit...
CVE-2013-5576
administrator/components/commedia/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . dot...
MS Office Compatibility Pack Remote Code Execution Vulnerabilities (2885084)
This host is missing an important security update according to Microsoft Bulletin MS13-086. OpenVAS Vulnerability Test $Id: secpodmscompatpackms13-086.nasl 6104 2017-05-11 09:03:48Z teissa $ MS Office Compatibility Pack Remote Code Execution Vulnerabilities 2885084 Authors: Antu Sanadi Copyright:...
CVE-2013-1743
creationtimestamp| type| source ---|---|--- 2013-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38807...
CVE-2013-1742
creationtimestamp| type| source ---|---|--- 2013-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38806...
CVE-2013-5967
creationtimestamp| type| source ---|---|--- 2013-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38781 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/alienvaultiso27001sqli.rb 2025-10-23 21:12:57+00:00| see...