CVE-2018-7357

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45972...

CVE-2018-7358

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45972...

CVE-2018-6757

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45961...

CVE-2018-6756

creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45961...

Adobe Flash Zero-Day Leveraged Via Office Docs in Campaign

An Adobe Flash Player zero-day exploit has been spotted in the wild as part of a widespread campaign, researchers said on Wednesday. Adobe has just issued a patch for the previously unknown critical flaw. The vulnerability, CVE-2018-15982, is a use-after-free flaw enabling arbitrary code executio...

Fedora Update for drupal7 FEDORA-2018-18023f40fa

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-19627

creationtimestamp| type| source ---|---|--- 2018-12-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45951...

CVE-2018-8474

creationtimestamp| type| source ---|---|--- 2018-12-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45936...

Fedora Update for chromium FEDORA-2018-fd194a1f14

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-4386

creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45912 2020-01-04 15:28:35+00:00| published-proof-of-concept| https://t.me/antichat/7551 2025-07-03 21:00:04+00:00| published-proof-of-concept|...

CVE-2018-4382

creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45911...

CVE-2018-4416

creationtimestamp| type| source ---|---|--- 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45910 2026-07-29 12:00:09+00:00| seen| https://t.me/CVEhub/18590 2026-07-30 00:00:23+00:00| published-proof-of-concept| https://t.me/CVEhub/18590...

Infogram: User account blocking by Internal Server error

If you send a language=en in https://infogram.com/api/users/me user be forever get an Internal Server error EVEN AFTER re-logining: https://youtu.be/AxYa11lEiWA I idk why does hackerone can't upload this video so I uploaded this video privately to the youtube! In this video, I'm trying to relogin...

CVE-2018-6329

creationtimestamp| type| source ---|---|--- 2018-11-28 02:34:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/uebbpserverdprivesc.rb 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45913 2025-02-06 03:13:43+00:00|...

CVE-2016-1555

creationtimestamp| type| source ---|---|--- 2018-11-26 17:56:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgearunauthexec.rb 2018-11-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45909 2020-01-08 13:22:45+00:00| seen|...

Critical WordPress Plugin Flaw Grants Admin Access to Any Registered Site User

Another day, another critical WordPress plugin vulnerability. The popular AMP for WP plugin, which helps WordPress sites load faster on mobile browsers, has a privilege-escalation flaw that allows WordPress site users of any level to make administrative changes to a website. The plugin, which has...

Microsoft Exchange Server Elevation of Privilege Vulnerability (November 2018)

The Microsoft Exchange install on the remote host contains an unspecified flaw that allows an authenticated, man-in-the-middle attacker to impersonate another user and escalate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

CVE-2018-8552

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402 2018-11-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45924...

63 New Flaws (Including 0-Days) Windows Users Need to Patch Now

It's Patch Tuesday once again…time for another round of security updates for the Windows operating system and other Microsoft products. This month Windows users and system administrators need to immediately take care of a total of 63 security vulnerabilities, of which 12 are rated critical, 49...

CVE-2018-8589

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka “Windows Win32k Elevation of Privilege Vulnerability.” This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. Recent assessments: gwillcox-r7 at November 22, 2020 3:02am UTC...