CVE-Exploitation-Reports

CVE-Exploitation-Reports CVE Exploitation Reports: CVE-2007-3280, CVE-2017-0144, CVE-2019-0708 This repository contains detailed exploitation reports for the following Common Vulnerabilities and Exposures CVEs: CVE-2007-3280: A buffer overflow vulnerability in the RealPlayer ActiveX control, whic...

Astra Linux – vulnerability in Firefox

Removing an XSLT parameter during processing could have led to an exploitable use-after-free. There have been reports of attacks in the wild exploiting this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

CVE-2026-7821

creationtimestamp| type| source ---|---|--- 2026-05-07 07:54:45+00:00| seen| https://ccb.belgium.be/advisories/warning-authenticated-remote-code-execution-vulnerability-ivanti-epmm-exploited-patch 2026-05-07 08:14:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-12...

BIT-JAVA-MIN-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

BIT-JAVA-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

PT-2026-37983

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

PT-2025-46470

Name of the Vulnerable Software and Affected Versions Multimedia Class Scheduler Service MMCSS affected versions not specified Description A use after free condition exists in the Multimedia Class Scheduler Service MMCSS. This allows a locally authorized attacker to elevate privileges...

Linux Distros Unpatched Vulnerability : CVE-2022-26486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild...

PT-2025-1058

Name of the Vulnerable Software and Affected Versions Windows Hyper-V NT Kernel Integration VSP versions are not explicitly specified in the provided sources. Description The issue is related to an elevation of privilege in Windows Hyper-V NT Kernel Integration VSP, allowing an attacker to elevat...

CVE-2023-22515

creationtimestamp| type| source ---|---|--- 2023-10-04 18:12:23+00:00| seen| https://t.me/cibsecurity/71588 2023-10-04 18:18:27+00:00| published-proof-of-concept| https://t.me/CyberWatchinsider/127 2023-10-04 22:49:19+00:00| exploited| https://t.me/ctinow/141225 2023-10-04 22:58:56+00:00|...

CVE-2021-31602

creationtimestamp| type| source ---|---|--- 2021-11-08 07:28:33+00:00| seen| https://t.me/cibsecurity/31947 2024-10-28 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-28 2024-11-04 00:00:00+00:00| exploited| The Shadowserver...

CVE-2021-31956

creationtimestamp| type| source ---|---|--- 2021-06-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=593 2021-06-09 04:51:08+00:00| seen| https://t.me/alexmakus/4121 2021-06-10 08:24:58+00:00| seen| MISP/df23874b-e926-4e6f-b80e-c8a58279bcb0 2021-06-15 10:49:56+00:00| see...

CVE-2020-3580

creationtimestamp| type| source ---|---|--- 2021-04-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=577 2021-06-24 13:34:08+00:00| published-proof-of-concept| https://t.me/ptswarm/48 2021-06-25 18:25:12+00:00| exploited| https://t.me/cibsecurity/25709 2021-06-26...

PT-2021-2694

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a privilege escalation vulnerability in the Windows operating system, specifically in the Desktop Window Manager. It is caused by a buffer overflow in memory, which ca...

CVE-2021-3129

creationtimestamp| type| source ---|---|--- 2021-01-12 18:52:35+00:00| seen| https://t.me/cibsecurity/21947 2021-01-23 14:27:59+00:00| published-proof-of-concept| Telegram/V0JRptGFrgnQJ2SXhKrSjD8wR0dUer2UmfcxEmcwlwjBg 2021-01-24 14:36:01+00:00| seen| https://t.me/CyberSecurityTechnologies/2562...

CVE-2018-20434

creationtimestamp| type| source ---|---|--- 2019-06-04 17:58:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/librenmsaddhostcmdinject.rb 2019-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46970 2019-06-28 00:00:00+00:00...

CVE-2018-11759

creationtimestamp| type| source ---|---|--- 2018-10-31 23:59:05+00:00| seen| https://t.me/ctinow/4350 2018-11-04 21:21:20+00:00| seen| https://t.me/canyoupwnme/4681 2018-11-04 21:32:22+00:00| published-proof-of-concept| https://t.me/antichat/2511 2024-10-28 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-11776

creationtimestamp| type| source ---|---|--- 2018-08-22 16:34:28+00:00| seen| https://t.me/thehackernews/53 2018-08-22 18:43:51+00:00| seen| https://t.me/informationsecuritychannel/19633 2018-08-22 21:14:39+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4283 2018-08-22 23:58:11+00:00|...