ShadowBrokers Expose NSA Access to SWIFT Service Bureaus

The NSA used exploits to target two SWIFT Service Bureaus in order to access banking data from a number of financial institutions in the Middle East. The access was likely used to monitor funding for terrorist operations, experts said today as analysis continues of the latest ShadowBrokers dump o...

Major Leak Suggests NSA Was Deep in Middle East Banking System

The Shadow Brokers hacker group is back with another trove of NSA documents including Windows exploits and evidence of financial spying in the Middle East. The post Major Leak Suggests NSA Was Deep in Middle East Banking System appeared first on WIRED...

Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A)

CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Schneider Electric Equipment: Modicon M221 PLCs and SoMachine Basic Vulnerability: Use of Hard-Coded Cryptographic Key, Protection Mechanism Failure UPDATE INFORMATION This updated...

KLA11915 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An implementation vulnerability in Securit...

KB4015383: Security Updates for the libjpeg Information Disclosure Vulnerability (April 2017)

The remote Windows host is missing security updates. It is, therefore, affected by an information disclosure vulnerability in the open-source libjpeg image processing library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Tools Used by Lamberts APT Found in Vault 7 Dumps

Links have emerged connecting targeted attacks going back a decade against high-profile government, industrial and financial targets around the world to hacking tools and documents leaked in the Vault 7 dump. Researchers at Kaspersky Lab today published a technical report on the activities of a...

PT-2017-1865 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to insufficient access control in Internet Explorer, allowing a remote attacker to elevate their privileges. This can enable the attacker to access informatio...

KLA11058 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Microsoft Edge. Malicious users can exploit these vulnerabilities to to gain privileges, execute arbitrary code, bypass security restrictions and obtain sensitive information. Below is a complete list of...

Microsoft Windows Hyper-V CVE-2017-0162 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Window...

Microsoft Windows CVE-2017-0191 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...

Shadow Brokers Group Releases More Stolen NSA Hacking Tools & Exploits

Remember The Shadow Brokers? They are back. A hackers group that previously claimed to have stolen a bunch of hacking tools malware, zero-day exploits, and implants created by the NSA and gained popularity last year for leaking a portion of those tools is back. Today, The Shadow Brokers group...

Apache Struts 2 Exploits Installing Cerber Ransomware

Attackers are attempting to exploit the recent Apache Struts vulnerability on Windows servers and the payload is a variant of the Cerber ransomware. The SANS Internet Storm Center on Thursday said it has seen numerous attempts during the past month to exploit the vulnerability in this way. The fl...

WordPress Marketing-WP v2.0.1 Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Marketing-WP v2.0.1 WordPress Plugin SQL Injection Exploit Author: TAD GROUP Vendor Homepage: http://marketing-wp.com/ Software Link: https://wordpress.org/plugins/mwp-forms/ Version: 2.0.1 Contact: email protected Website:...

WordPress KittyCatfish 2.2 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: KittyCatfish 2.2 Plugin for WordPress - SQL Injection Exploit Author: TAD GROUP Vendor Homepage: https://wordpress.org/plugins-wp/kittycatfish/ Software Link: https://wordpress.org/plugins-wp/kittycatfish/ Version: 2.2 Contact:...

EaST - Exploits and Security Tools Framework

Pentest framework environment is the basis of IT security specialist’s toolkit. This software is essential as for learning and improving of knowledge in IT systems attacks and for inspections and proactive protection. The need of native comprehensive open source pen test framework with high level...

Fedora 25 : chromium (2017-ff6940bf63)

Security fix for CVE-2017-5055, CVE-2017-5054, CVE-2017-5052, CVE-2017-5056, CVE-2017-5053 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Metasploit, [REDACTED] Edition

Why should REDACTED have all the fun with spiffy codenames for their exploits? As of today, Metasploit is taking a page from REDACTED, and equipping all Metasploit modules with equally fear-and-awe-inspiring codenames. Sure, there are catchy names for vulnerabilities -- we remember you fondly,...

Exploit Database - The official Exploit Database Repository

The Exploit Database is an archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. Its aim is to serve as the most comprehensive collection of exploits gathered through direct submissions, mailing lists, and other...

Workarounds Available for Flaws in Siemens RUGGEDCOM Gear

Update Siemens industrial VPN and firewall appliances used in severe environments remain unpatched after an advisory from ICS-CERT on Tuesday disclosed that a number of serious vulnerabilities exist in the gear. Siemens has made a number of recommendations for workarounds, but it’s unknown whethe...

CVE-2015-5736

creationtimestamp| type| source ---|---|--- 2017-03-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41722 2017-03-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41721 2018-08-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45149 2025-09-06...