CVE-2019-11537

creationtimestamp| type| source ---|---|--- 2019-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46753 2021-05-02 06:40:48+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/311...

CVE-2019-2721

creationtimestamp| type| source ---|---|--- 2019-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46747...

Billion laughs attack in c3p0

c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration...

CVE-2019-3842

creationtimestamp| type| source ---|---|--- 2019-04-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46743...

CVE-2019-8565

creationtimestamp| type| source ---|---|--- 2019-04-22 16:59:51+00:00| published-proof-of-concept| https://t.me/antichat/4586 2019-05-20 18:21:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/feedbackassistantroot.rb 2019-05-23 00:00:00+00:00|...

Design/Logic Flaw

DISPUTED An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with $a at the beginning and nested repetition operators. NOTE: t...

CVE-2019-2698

creationtimestamp| type| source ---|---|--- 2019-04-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46723...

Electrum Bitcoin wallets under siege

By Adam Thomas and Jérôme Segura, with additional contributions from Vasilios Hioueras and S!Ri Since at least late December 2018, many users of the popular Electrum Bitcoin wallet have fallen victim to a series of phishing attacks, which we estimate netted crooks well over 771 Bitcoins—an amount...

CVE-2019-0730

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46713...

CVE-2019-0732

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46716...

CVE-2019-0836

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46718 2024-03-15 08:58:02+00:00| seen| https://t.me/ptsoft/243 2024-05-03 09:04:40+00:00| published-proof-of-concept| https://t.me/ptsoft/270 2024-10-15 18:31:53+00:00|...

CVE-2019-0796

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46715...

CVE-2019-0805

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46717...

CVE-2019-0735

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46712...

Design/Logic Flaw

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-4203

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-4203

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-11447

creationtimestamp| type| source ---|---|--- 2019-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46698 2020-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48800 2024-11-14 06:07:03+00:00| seen| MISP/e0a2986c-7c54-4933-95c6-841854d50e7f...

CVE-2019-3396

creationtimestamp| type| source ---|---|--- 2019-04-13 13:20:12+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/ajankohtaista/atlassian-confluence-ohjelmiston-haavoittuvuutta-hyvaksikaytetaan-tietomurroissa 2019-04-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46731...

Wordpress Yellow Pencil Plugin Flaws Actively Exploited

The maker of a WordPress plugin, Yellow Pencil Visual Theme Customizer, is asking all users to immediately update after it was discovered to have software vulnerabilities that are being actively exploited. The attacker exploiting these flaws has been behind several other recent plugin attacks the...