Azure Linux Agent Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks. An authenticated attacker who successfully exploited this vulnerability could view data in swap that is normally hidden. None of the Azure endorsed distros are vulnerable to this iss...

Microsoft Releases Patches for 64 Flaws — Two Under Active Attack

It's time for another batch of "Patch Tuesday" updates from Microsoft. Microsoft today released its March 2019 software updates to address a total of 64 CVE-listed security vulnerabilities in its Windows operating systems and other products, 17 of which are rated critical, 45 important, one...

Adobe Releases Patches for Critical Flaws in Photoshop CC and Digital Edition

Adobe users would feel lighter this month, as Adobe has released patches for just two security vulnerability in its March Security Update. The company today released its monthly security updates to address two critical arbitrary code execution vulnerabilities—one in Adobe Photoshop CC and another...

CVE-2018-1335

creationtimestamp| type| source ---|---|--- 2019-03-12 15:32:18+00:00| published-proof-of-concept| https://t.me/antichat/3945 2019-03-12 16:31:45+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5247 2019-03-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46540...

Fedora Update for drupal7 FEDORA-2019-82df33e428

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

New Google Chrome Zero-Day Vulnerability Found Actively Exploited in the Wild

You must update your Google Chrome immediately to the latest version of the web browsing application. Security researcher Clement Lecigne of Google's Threat Analysis Group discovered and reported a high severity vulnerability in Chrome late last month that could allow remote attackers to execute...

CVE-2019-2023

creationtimestamp| type| source ---|---|--- 2019-03-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46504...

CVE-2019-2025

creationtimestamp| type| source ---|---|--- 2019-03-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46503...

CVE-2019-9213

creationtimestamp| type| source ---|---|--- 2019-03-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46502 2020-01-22 13:18:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rdsatomicfreeopnullpointerderefprivesc.rb 2020-01-23...

Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners

Docker is a technology that allows you to perform operating system level virtualization. An incredible number of companies and production hosts are running Docker to develop, deploy and run applications inside containers. You can interact with Docker via the terminal and also via remote API. The...

CVE-2019-8942

creationtimestamp| type| source ---|---|--- 2019-03-01 08:59:30+00:00| published-proof-of-concept| https://t.me/antichat/3785 2019-03-01 09:58:50+00:00| seen| https://t.me/thebugbountyhunter/2368 2019-04-04 20:32:00+00:00| seen|...

CVE-2019-8943

creationtimestamp| type| source ---|---|--- 2019-03-01 08:59:30+00:00| published-proof-of-concept| https://t.me/antichat/3785 2019-03-01 09:58:50+00:00| seen| https://t.me/thebugbountyhunter/2368 2019-04-04 20:32:00+00:00| seen|...

CVE-2019-9162

creationtimestamp| type| source ---|---|--- 2019-03-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46477...

CVE-2019-1663

creationtimestamp| type| source ---|---|--- 2019-02-28 15:31:41+00:00| seen| https://t.me/cibsecurity/2779 2019-02-28 15:37:47+00:00| seen| https://t.me/ctinow/8646 2019-03-01 16:19:36+00:00| seen| https://t.me/informationsecuritychannel/25144 2019-04-15 00:00:00+00:00| exploited|...

CVE-2019-9184

creationtimestamp| type| source ---|---|--- 2019-02-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46467...

CVE-2018-18982

creationtimestamp| type| source ---|---|--- 2019-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46449 2019-02-22 04:49:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/nuuo/nuuocmssqli.rb 2025-02-06 03:13:43+00:00| seen|...

CVE-2019-3474

creationtimestamp| type| source ---|---|--- 2019-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46450...

CVE-2019-3475

creationtimestamp| type| source ---|---|--- 2019-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46450...

CVE-2019-3924

creationtimestamp| type| source ---|---|--- 2019-02-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46444 2019-02-21 05:45:40+00:00| seen| Telegram/2E2dy9OYYaEYmhdkxDpQcX-ZNfT83PbwDTTfo0Aql9rM 2019-02-22 02:26:30+00:00| published-proof-of-concept|...

Drupal 8.5.x < 8.5.11 / 8.6.x < 8.6.10 Remote Code Execution (SA-CORE-2019-003)

According to its self-reported version, the instance of Drupal running on the remote web server is 8.5.x prior to 8.5.11, or 8.6.x prior to 8.6.10. It is, therefore, affected by a remote code execution vulnerability due to improper sanitization of data from non-form sources. %NASLMINLEVEL 70300 C...