CVE-2018-19627

creationtimestamp| type| source ---|---|--- 2018-12-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45951...

CVE-2018-8474

creationtimestamp| type| source ---|---|--- 2018-12-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45936...

Fedora Update for chromium FEDORA-2018-fd194a1f14

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-4386

creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45912 2020-01-04 15:28:35+00:00| published-proof-of-concept| https://t.me/antichat/7551 2025-07-03 21:00:04+00:00| published-proof-of-concept|...

CVE-2018-4382

creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45911...

CVE-2018-4416

creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45910 2026-07-29 12:00:09+00:00| seen| https://t.me/CVEhub/18590 2026-07-30 00:00:23+00:00| published-proof-of-concept| https://t.me/CVEhub/18590...

Infogram: User account blocking by Internal Server error

If you send a language=en in https://infogram.com/api/users/me user be forever get an Internal Server error EVEN AFTER re-logining: https://youtu.be/AxYa11lEiWA I idk why does hackerone can't upload this video so I uploaded this video privately to the youtube! In this video, I'm trying to relogin...

CVE-2018-6329

creationtimestamp| type| source ---|---|--- 2018-11-28 02:34:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/uebbpserverdprivesc.rb 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45913 2025-02-06 03:13:43+00:00|...

CVE-2016-1555

creationtimestamp| type| source ---|---|--- 2018-11-26 17:56:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgearunauthexec.rb 2018-11-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45909 2020-01-08 13:22:45+00:00| seen|...

Critical WordPress Plugin Flaw Grants Admin Access to Any Registered Site User

Another day, another critical WordPress plugin vulnerability. The popular AMP for WP plugin, which helps WordPress sites load faster on mobile browsers, has a privilege-escalation flaw that allows WordPress site users of any level to make administrative changes to a website. The plugin, which has...

Microsoft Exchange Server Elevation of Privilege Vulnerability (November 2018)

The Microsoft Exchange install on the remote host contains an unspecified flaw that allows an authenticated, man-in-the-middle attacker to impersonate another user and escalate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

CVE-2018-8552

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402 2018-11-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45924...

63 New Flaws (Including 0-Days) Windows Users Need to Patch Now

It's Patch Tuesday once again…time for another round of security updates for the Windows operating system and other Microsoft products. This month Windows users and system administrators need to immediately take care of a total of 63 security vulnerabilities, of which 12 are rated critical, 49...

CVE-2018-8589

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka “Windows Win32k Elevation of Privilege Vulnerability.” This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. Recent assessments: gwillcox-r7 at November 22, 2020 3:02am UTC...

Microsoft Skype for Business Denial of Service Vulnerability

A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker's user rights. For an...

Security Updates for Microsoft Excel Products (November 2018)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

CVE-2017-1000083

creationtimestamp| type| source ---|---|--- 2018-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45824 2019-02-07 00:11:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/evincecbtcmdinjection.rb 2019-02-11...

Android RSSI Broadcast Information Disclosure

Blog post here: https://wwws.nightwatchcybersecurity.com/2018/11/11/cve-2018-9581/ NOTE: This bug is part of a series of three related Android bugs with the same root cause: CVE-2018-9489, CVE-2018-9581 and CVE-2018-15835. A presentation covering all three bugs was given at BSides DE in the fall ...

CVE-2018-19207

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

CVE-2018-15437

creationtimestamp| type| source ---|---|--- 2018-11-12 17:11:01+00:00| seen| MISP/5be9b392-fdc8-419c-ab52-48a10a021402 2018-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45829...