6929 matches found
Citrix ADC and Gateway Remote Code Execution Vulnerability (CVE-2019-19781)
Update January 17, 2020: A new detection in Qualys Web Application Scanning was added. See "Detecting with Qualys WAS" below. Citrix released a security advisory CVE-2019-19781 for a remote code execution vulnerability in Citrix Application Delivery Controller ADC and Citrix Gateway products. The...
CVE-2019-15039
creationtimestamp| type| source ---|---|--- 2020-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47891...
CVE-2019-20354
creationtimestamp| type| source ---|---|--- 2020-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47882 2024-03-19 18:12:11+00:00| seen| https://t.me/ctinow/211780...
CVE-2019-10758
creationtimestamp| type| source ---|---|--- 2019-12-30 03:36:07+00:00| published-proof-of-concept| https://github.com/mongo-express/mongo-express/security/advisories/GHSA-h47j-hc6x-h3qq 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 23:21:18+00:00| seen|...
CVE-2019-5596
creationtimestamp| type| source ---|---|--- 2019-12-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47829 2026-07-29 12:00:44+00:00| seen| https://t.me/CVEhub/9395 2026-07-30 00:01:14+00:00| seen| https://t.me/CVEhub/9395 2026-07-31 11:00:04+00:00| published-proof-of-concept|...
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)
The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host. Please refer to advisory CTX267027 for more...
Apple's Bug Bounty Opens for Business, $1M Payout Included
Apple has officially opened its historically private bug-bounty program to the public, while boosting its top payout to $1 million. Bounty hunters seeking that $1 million will need to provide a working exploit for a zero-click remote chain with full kernel execution and persistence on Apple’s...
Denial of Service Vulnerability in iPACS-5772 at Jiangsu Jinzhi Technology Co.
iPACS-5772 is a measurement and control device with remote control, telemetry, telecommunication functions, logic blocking function, programmed operation function, device self-test, time-alignment function, and the device is equipped with software time-alignment and hardware time-alignment...
Fedora 31 : openslp (2019-1e5ae33e87)
Security fix for CVE-2019-5544 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
CVE-2019-7287
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges. Recent assessments: gwillcox-r7 at November 22, 2020 2:38am UTC reported: Reported as exploited in the wild as pa...
Cross site request forgery (csrf)
Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...
CVE-2019-11657
Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...
NopCommerce 4.2.0 - Privilege Escalation
NopCommerce 4.2.0 - Privilege Escalation Vulnerability Title: NopCommerce 4.2.0 - Privilege Escalation Author: Alessandro Magnosi d3adc0de Date: 2019-07-07 Vendor Homepage: https://www.nopcommerce.com/ Software Link : https://www.nopcommerce.com/ Tested Version: 4.2.0 Vulnerability Type: Privileg...
Metasploit Sample Webapp Exploit
Exploit for python platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit sample shows how an exploit module could be written to exploit a bug in an arbitrary web server cla...
CVE-2019-18935
creationtimestamp| type| source ---|---|--- 2019-12-16 10:28:50+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3527 2019-12-17 21:25:58+00:00| published-proof-of-concept| https://t.me/antichat/7389 2019-12-17 22:22:18+00:00| published-proof-of-concept|...
The little-known ways mobile device sensors can be exploited by cybercriminals
The bevy of mobile device sensors in modern smartphones and tablets make them more akin to pocket-sized laboratories and media studios than mere communication devices. Cameras, microphones, accelerometers, and gyroscopes give incredible flexibility to app developers and utility to mobile device...
CVE-2019-16451
creationtimestamp| type| source ---|---|--- 2019-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47769 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:05+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...
Microsoft SQL Server Reporting Services XSS Vulnerability
A cross-site scripting XSS vulnerability exists when Microsoft SQL Server Reporting Services SSRS does not properly sanitize a specially-crafted web request to an affected SSRS server. An attacker who successfully exploited the vulnerability could run scripts in the context of the targeted user...
New Linux Bug Lets Attackers Hijack Encrypted VPN Connections
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...