Memory corruption

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

Microsoft Put Off Fixing Zero Day for 2 Years

A security flaw in the way Microsoft Windows guards users against malicious files was actively exploited in malware attacks for two years before last week, when Microsoft finally issued a software update to correct the problem. One of the 120 security holes Microsoft fixed on Aug. 11s Patch Tuesd...

CVE-2020-1380

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-90800)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server, which could be exploite...

CVE-2020-17496

creationtimestamp| type| source ---|---|--- 2020-08-12 18:11:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vbulletinwidgettemplaterce.rb 2020-10-09 13:24:43+00:00| seen| MISP/b14f5ca4-fb33-4da3-ad29-dcaf9e3d3fc4 2020-11-01 13:37:36+00:00|...

CVE-2020-8211

creationtimestamp| type| source ---|---|--- 2020-08-12 04:42:19+00:00| exploited| https://t.me/cKure/1810 2020-08-14 06:54:22+00:00| seen| https://t.me/informationsecuritychannel/39832...

CVE-2020-8212

creationtimestamp| type| source ---|---|--- 2020-08-12 04:42:19+00:00| exploited| https://t.me/cKure/1810 2020-08-14 06:54:22+00:00| seen| https://t.me/informationsecuritychannel/39832...

CVE-2020-8209

creationtimestamp| type| source ---|---|--- 2020-08-12 04:42:19+00:00| exploited| https://t.me/cKure/1810 2020-08-14 06:54:22+00:00| seen| https://t.me/informationsecuritychannel/39832 2020-12-09 04:53:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2115 2021-08-24...

Microsoft Windows Multiple Vulnerabilities (KB4571736)

This host is missing a critical security update according to Microsoft KB4571736 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4571729)

This host is missing a critical security update according to Microsoft KB4571729 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Denial Of Service (DoS)

Mozilla is vulnerable to denial of serviceDoS. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...

CVE-2020-13379

creationtimestamp| type| source ---|---|--- 2020-08-01 19:07:21+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/4526 2020-08-03 04:31:10+00:00| published-proof-of-concept| https://t.me/cKure/1649 2020-09-09 06:35:17+00:00| published-proof-of-concept|...

CVE-2020-11579

creationtimestamp| type| source ---|---|--- 2020-07-30 09:59:08+00:00| published-proof-of-concept| https://t.me/cKure/1571 2020-09-03 22:55:16+00:00| seen| https://t.me/cibsecurity/14466 2020-12-30 15:05:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1500 2022-06-09...

Default configuration

In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's...

GHSA-67J9-C52G-W2Q9 Authorization Bypass in I hate money

Impact An authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's private code. With the default...

Attackers Exploiting High-Severity Network Security Flaw, Cisco Warns

Cisco is warning that a high-severity flaw in its network security software is being actively exploited – allowing remote, unauthenticated attackers to access sensitive data. Patches for the vulnerability CVE-2020-3452 in question, which ranks 7.5 out of 10 on the CVSS scale, were released last...

CVE-2020-3452

creationtimestamp| type| source ---|---|--- 2020-07-23 07:00:58+00:00| published-proof-of-concept| https://t.me/cKure/1426 2020-07-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=497 2020-07-25 13:49:40+00:00| exploited| https://t.me/informationsecuritychannel/39455...

RHEL 8 : .NET Core (RHSA-2020:2988)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2988 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

CVE-2019-12725

creationtimestamp| type| source ---|---|--- 2020-07-19 19:18:25+00:00| exploited| https://t.me/cKure/1360 2020-10-09 13:27:00+00:00| seen| MISP/99de2314-4625-4a10-aed6-a4b78fc7c6a8 2020-11-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49096 2021-05-13 09:27:48+00:00| seen|...