CVE-2018-9022

creationtimestamp| type| source ---|---|--- 2019-12-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47748 2024-09-05 22:14:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/177...

‘StrandHogg’ Vulnerability Allows Malware to Pose as Legitimate Android Apps

Researchers have discovered a new Android vulnerability that could allow malware to pose as popular apps and ask for various permissions, potentially allowing hackers to listen in on users, take photos, read and send SMS messages, and basically take over various functions as if they are the...

D-Link DNS-320 Remote Command Injection Vulnerability - Active Check

The D-Link DNS-320 NAS-device is prone to a remote command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

CVE-2011-3600

creationtimestamp| type| source ---|---|--- 2019-11-26 08:57:30+00:00| seen| https://t.me/cibsecurity/8324 2024-10-25 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-25 2024-10-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-26...

CVE-2019-2633

creationtimestamp| type| source ---|---|--- 2019-11-20 14:03:45+00:00| exploited| https://t.me/SecLabNews/6263...

CVE-2019-15794

creationtimestamp| type| source ---|---|--- 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47692 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2019-15792

creationtimestamp| type| source ---|---|--- 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47693...

CVE-2019-15793

creationtimestamp| type| source ---|---|--- 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47693...

WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

No nonce protection on form submissions leading to CSRF and no input/output sanitization allowing for XSS when CSRF is exploited. PoC...

FreeBSD -- Machine Check Exception on Page Size Change

Intel discovered a previously published erratum on some Intel platforms can be exploited by malicious software to potentially cause a denial of service by triggering a machine check that will crash or hang the system. Malicious guest operating systems may be able to crash the host...

Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-16113

creationtimestamp| type| source ---|---|--- 2019-11-12 21:52:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bludituploadimagesexec.rb 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47699 2020-06-04 18:18:28+00:00|...

Microsoft Patches RCE Bug Actively Under Attack

A critical bug in a Microsoft scripting engine, under active attack, has been patched as part of Microsoft’s Patch Tuesday security roundup. The vulnerability exists in Internet Explorer and allows an attacker to execute rogue code if a victim is coaxed into visiting a malicious web page, or, if...

CVE-2019-1429

creationtimestamp| type| source ---|---|--- 2019-11-12 20:21:26+00:00| exploited| https://t.me/ctinow/17594 2019-11-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=434 2019-11-13 20:30:12+00:00| exploited| https://t.me/CyberGovIL/624 2019-11-22 00:00:00+00:00| exploited...

Windows Certificate Dialog Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete...

Fedora 31 : chromium (2019-688d52f9ff)

Update chromium to 78.0.3904.87. Fixes CVE-2019-13720 and CVE-2019-13721 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2019-8195

creationtimestamp| type| source ---|---|--- 2019-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47609 2025-08-31 03:01:29+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:06+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2019-8196

creationtimestamp| type| source ---|---|--- 2019-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47610 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:05+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2017-13156

creationtimestamp| type| source ---|---|--- 2019-11-07 02:36:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/janus.rb 2019-11-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47601 2021-08-17 13:01:03+00:00| seen|...