Old WordPress Plugin Being Exploited in RCE Attacks

Researchers are warning that attackers are abusing a vulnerability in WordPress site admins’ outdated versions of a migration plugin called Duplicator – allowing them to execute remote code. Made by Snap Creek Software, all Duplicator plugins earlier than version 1.2.42 are vulnerable to the...

CVE-2018-17254

creationtimestamp| type| source ---|---|--- 2018-09-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45423 2024-11-14 06:08:15+00:00| seen| MISP/d314eb11-81e9-4d90-b43a-b17c0d47f952 2025-09-17 21:02:34+00:00| seen|...

CVE-2019-9766

creationtimestamp| type| source ---|---|--- 2018-09-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45403...

CVE-2018-1756

creationtimestamp| type| source ---|---|--- 2018-09-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45392...

Apache Struts 2.x < 2.3.15.1 Multiple Vulnerabilities (S2-016) (S2-017)

The version of Apache Struts running on the remote host is 2.x prior to 2.3.15.1. It, therefore, is affected by multiple vulnerabilities including a remote command execution vulnerability and an open redirect vulnerability. Note that Nessus has not tested for these issues but has instead relied...

CVE-2018-16509

creationtimestamp| type| source ---|---|--- 2018-09-06 02:15:08+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/ghostscriptfailedrestore.rb 2018-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45369 2023-12-04...

CVE-2018-15918

creationtimestamp| type| source ---|---|--- 2018-09-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45340...

KLA11313 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Multiple serious vulnerabilities were found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An use after free vulnerabili...

Cisco Identity Services Engine Struts2 Namespace Vulnerability

According to its self-reported version, the Cisco Identity Services Engine Software is affected by a struts2 namespace vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...

CVE-2018-10900

creationtimestamp| type| source ---|---|--- 2018-08-30 15:55:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/networkmanagervpncusernameprivesc.rb 2018-08-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45313 2018-08-31...

CVE-2018-16133

creationtimestamp| type| source ---|---|--- 2018-08-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45303...

CVE-2018-16134

creationtimestamp| type| source ---|---|--- 2018-08-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45309...

CVE-2018-15745

creationtimestamp| type| source ---|---|--- 2018-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45296 2025-01-31 22:05:36+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/argusdvr4lficve201815745.rb 2025-02-01 23:08:24+00:00|...

CVE-2017-1000499

creationtimestamp| type| source ---|---|--- 2018-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45284...

CVE-2018-8353

creationtimestamp| type| source ---|---|--- 2018-08-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45279 2025-08-31 03:00:48+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Microsoft Windows - JScript RegExp.lastIndex Use-After-Free

alert'start'; var vars = ; var r = new RegExp; forvar i=0; i20000; i++ varsi = "aaaaa"; r.lastIndex = "aaaaa"; forvar i=20000; i40000;...

CVE-2018-15535

creationtimestamp| type| source ---|---|--- 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45271...

CVE-2018-15536

creationtimestamp| type| source ---|---|--- 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45271...

CVE-2018-15877

creationtimestamp| type| source ---|---|--- 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45274 2019-11-29 10:20:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpplainviewactivitymonitorrce.rb 2025-02-06...

CVE-2017-2741

creationtimestamp| type| source ---|---|--- 2018-08-24 03:56:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hpjetdirectpathtraversal.rb 2018-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45273 2025-02-06 03:13:43+00:00...