CVE-2018-1000870

PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. AdminVictim views user in admin-panel and gets...

Design/Logic Flaw

PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. AdminVictim views user in admin-panel and gets...

CVE-2018-8619

creationtimestamp| type| source ---|---|--- 2018-12-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46023 2023-04-16 12:26:20+00:00| exploited| https://t.me/CyberSecurityTechnologies/130...

Scripting Engine Memory Corruption Vulnerability (KB4483228)

This host is missing an important security update according to Microsoft KB4483228 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-8653

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka “Scripting Engine Memory Corruption Vulnerability.” This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

CVE-2018-8631

creationtimestamp| type| source ---|---|--- 2018-12-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46001...

CVE-2018-4404

creationtimestamp| type| source ---|---|--- 2018-12-13 19:58:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safariproxyobjecttypeconfusion.rb 2018-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45998 2024-05-31...

CVE-2018-7691

creationtimestamp| type| source ---|---|--- 2018-12-13 05:01:36+00:00| published-proof-of-concept| https://t.me/defconnews/293 2018-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45990...

CVE-2018-7690

creationtimestamp| type| source ---|---|--- 2018-12-13 04:46:18+00:00| published-proof-of-concept| https://t.me/defconnews/290 2018-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45989...

CVE-2018-4438

creationtimestamp| type| source ---|---|--- 2018-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45984...

Microsoft Windows Multiple Vulnerabilities (KB4471321)

This host is missing a critical security update according to Microsoft KB4471321 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-2894

creationtimestamp| type| source ---|---|--- 2018-12-11 15:50:28+00:00| seen| MISP/5c0fd6cc-f868-4dca-890c-1ea30a021402 2019-02-06 01:53:29+00:00| seen| MISP/5c5a3d7b-ba70-474a-bd8a-1b5a0a021402 2020-05-12 13:27:31+00:00| seen| https://t.me/Ninjutsuos/134 2020-05-12 13:27:34+00:00| seen|...

Microsoft Text-To-Speech Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or...

CVE-2018-4435

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45960 2018-12-12 05:16:20+00:00| published-proof-of-concept| https://t.me/defconnews/167...

CVE-2018-7357

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45972...

CVE-2018-7358

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45972...

CVE-2018-6756

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45961...

CVE-2018-6757

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45961...

Adobe Flash Zero-Day Leveraged Via Office Docs in Campaign

An Adobe Flash Player zero-day exploit has been spotted in the wild as part of a widespread campaign, researchers said on Wednesday. Adobe has just issued a patch for the previously unknown critical flaw. The vulnerability, CVE-2018-15982, is a use-after-free flaw enabling arbitrary code executio...

Fedora Update for drupal7 FEDORA-2018-18023f40fa

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...