6929 matches found
CVE-2018-12126
creationtimestamp| type| source ---|---|--- 2019-05-15 07:31:51+00:00| exploited| https://t.me/antichat/4926 2019-05-15 09:46:28+00:00| seen| https://t.me/cybershit/488 2019-05-16 01:06:01+00:00| seen| https://t.me/QubesOS/339 2026-07-29 12:01:12+00:00| seen|...
CVE-2018-12127
creationtimestamp| type| source ---|---|--- 2019-05-15 07:31:51+00:00| exploited| https://t.me/antichat/4926 2019-05-15 09:46:28+00:00| seen| https://t.me/cybershit/488 2019-05-16 01:06:01+00:00| seen| https://t.me/QubesOS/339 2023-12-18 00:24:49+00:00| seen| https://t.me/arpsyndicate/1870...
Microsoft Windows Multiple Vulnerabilities (KB4494440)
This host is missing a critical security update according to Microsoft KB4494440 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Patches Zero-Day Bug Under Active Attack
Microsoft has released a patch for an elevation-of-privileges vulnerability rated important, which is being exploited in the wild. The bug fix is part of Microsoft’s May Patch Tuesday Security Bulletin. It’s tied to the Windows Error Reporting feature and is being abused by attackers who have...
WhatsApp Zero-Day Exploited in Targeted Spyware Attacks
UPDATE WhatsApp is urging users to update as soon as possible, after a zero-day vulnerability found in its messaging platform was exploited by attackers who were able to inject spyware onto victims’ phones in targeted campaigns. First reported by the Financial Times, the popular messaging app...
Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability
A Cross-site Scripting XSS vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input. An authenticated attacker could exploit the vulnerability by sending a specially crafted payload to an Azure DevOps server or a Team Foundation server,...
CVE-2019-3568
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to...
SOCA Access Control System 180612 - SQL Injection
SOCA Access Control System 180612 - SQL Injection SOCA Access Control System 180612 SQL Injection And Authentication Bypass Vendor: SOCA Technology Co., Ltd Product web page: http://www.socatech.com Affected version: 180612, 170000 and 141007 Summary: The company's products include proximity and...
CVE-2019-11600
creationtimestamp| type| source ---|---|--- 2019-05-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46838...
CVE-2019-7652
creationtimestamp| type| source ---|---|--- 2019-05-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46820...
Design/Logic Flaw
Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...
High-Severity Bug Leaves Cisco TelePresence Gear Open to Attack
Cisco Systems has patched two high-severity vulnerabilities that can be exploited by remote unauthenticated adversaries to launch denial of service attacks. Impacted are Cisco’s TelePresence Video Communication Server and the company’s ASA 5500-X Series Firewalls. The vulnerability with the wides...
Out-of-bounds Write
Thunderbird, Firefox ESR, and Firefox are vulnerable to out-of-bounds write. ClearKeyDecryptor function can be exploited by a remote attacker to cause out-of-bounds write via decrypting some Clearkey-encrypted media content. This may lead to writing of arbitrary data within memory, resulting in a...
Ad Server Patched to Stop Possible Malware Distribution
UPDATE The open-source advertising platform Revive Adserver is urging customers to patch two vulnerabilities, one of which is critical and may have been exploited to allow hackers to deliver malware to third-party websites. Revive Adserver, formerly known as OpenX Source, is a free, open-source a...
CVE-2019-11599
creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46781 2020-05-08 18:36:05+00:00| seen| https://t.me/cibsecurity/11946 2020-05-08 18:54:15+00:00| seen| https://t.me/VulnerabilityNews/14459 2024-02-15 19:17:04+00:00| seen|...
CVE-2019-10664
creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46773...
CVE-2019-10123
creationtimestamp| type| source ---|---|--- 2019-04-29 19:13:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/aiseselserverrce.rb 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46782 2025-02-06 03:13:43+00:00| seen...
CVE-2019-2725
creationtimestamp| type| source ---|---|--- 2019-04-29 05:38:37+00:00| seen| MISP/5cc68db3-cf08-48fa-b369-07fdc0a8ab16 2019-05-02 10:14:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/ajankohtaista/oracle-weblogic-palvelinohjelmiston-kriittista-haavoittuvuutta-hyvaksikaytetaan 2019-05-0...
