CVE-2019-3568

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to...

SOCA Access Control System 180612 - SQL Injection

SOCA Access Control System 180612 - SQL Injection SOCA Access Control System 180612 SQL Injection And Authentication Bypass Vendor: SOCA Technology Co., Ltd Product web page: http://www.socatech.com Affected version: 180612, 170000 and 141007 Summary: The company's products include proximity and...

CVE-2019-11600

creationtimestamp| type| source ---|---|--- 2019-05-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46838...

CVE-2019-7652

creationtimestamp| type| source ---|---|--- 2019-05-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46820...

Design/Logic Flaw

Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...

High-Severity Bug Leaves Cisco TelePresence Gear Open to Attack

Cisco Systems has patched two high-severity vulnerabilities that can be exploited by remote unauthenticated adversaries to launch denial of service attacks. Impacted are Cisco’s TelePresence Video Communication Server and the company’s ASA 5500-X Series Firewalls. The vulnerability with the wides...

Out-of-bounds Write

Thunderbird, Firefox ESR, and Firefox are vulnerable to out-of-bounds write. ClearKeyDecryptor function can be exploited by a remote attacker to cause out-of-bounds write via decrypting some Clearkey-encrypted media content. This may lead to writing of arbitrary data within memory, resulting in a...

Ad Server Patched to Stop Possible Malware Distribution

UPDATE The open-source advertising platform Revive Adserver is urging customers to patch two vulnerabilities, one of which is critical and may have been exploited to allow hackers to deliver malware to third-party websites. Revive Adserver, formerly known as OpenX Source, is a free, open-source a...

CVE-2019-11599

creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46781 2020-05-08 18:36:05+00:00| seen| https://t.me/cibsecurity/11946 2020-05-08 18:54:15+00:00| seen| https://t.me/VulnerabilityNews/14459 2024-02-15 19:17:04+00:00| seen|...

CVE-2019-10664

creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46773...

CVE-2019-10123

creationtimestamp| type| source ---|---|--- 2019-04-29 19:13:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/aiseselserverrce.rb 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46782 2025-02-06 03:13:43+00:00| seen...

CVE-2019-2725

creationtimestamp| type| source ---|---|--- 2019-04-29 05:38:37+00:00| seen| MISP/5cc68db3-cf08-48fa-b369-07fdc0a8ab16 2019-05-02 10:14:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/ajankohtaista/oracle-weblogic-palvelinohjelmiston-kriittista-haavoittuvuutta-hyvaksikaytetaan 2019-05-0...

CVE-2019-3844

creationtimestamp| type| source ---|---|--- 2019-04-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46760...

CVE-2019-5816

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page...

CVE-2019-11537

creationtimestamp| type| source ---|---|--- 2019-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46753 2021-05-02 06:40:48+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/311...

CVE-2019-2721

creationtimestamp| type| source ---|---|--- 2019-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46747...

Billion laughs attack in c3p0

c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration...

CVE-2019-3842

creationtimestamp| type| source ---|---|--- 2019-04-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46743...

CVE-2019-8565

creationtimestamp| type| source ---|---|--- 2019-04-22 16:59:51+00:00| published-proof-of-concept| https://t.me/antichat/4586 2019-05-20 18:21:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/feedbackassistantroot.rb 2019-05-23 00:00:00+00:00|...

Design/Logic Flaw

DISPUTED An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with $a at the beginning and nested repetition operators. NOTE: t...