CVE-2013-6985

creationtimestamp| type| source ---|---|--- 2013-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38862...

CVE-2013-7091

creationtimestamp| type| source ---|---|--- 2013-12-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30085 2013-12-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30472 2018-05-29 15:50:33+00:00| seen|...

OptimizePress Theme < 1.6 - Unauthenticated Arbitrary File Upload

The OptimizePress premium WordPress theme was vulnerable to Unauthenticated Arbitrary File Upload, which could allow unauthenticated attackers to compromise a WordPress site. This vulnerability has been seen exploited in the wild. PoC The affected file was:...

Code injection

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013...

CVE-2013-5065 Microsoft NDProxy.sys Privilege Escalation

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: Xp recently broke a local kernel...

CVE-2013-6797

creationtimestamp| type| source ---|---|--- 2013-11-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38844...

CVE-2013-6282

The 1 getuser and 2 putuser API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against...

CVE-2013-4547

creationtimestamp| type| source ---|---|--- 2013-11-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38846 2021-08-25 13:22:18+00:00| seen| https://t.me/truesecator/2035...

openSUSE: Security Advisory for update (openSUSE-SU-2013:1176-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft and Google Collaborate on Effort to Clean Web of Cild Abuse Images

Microsoft and Google are cooperating in an effort to make it much more difficult for child predators to find illegal images online by blocking search results for about 100,000 search terms. The companies also are collaborating on methods to better identify illegal abuse images and remove them mor...

Microsoft Windows ActiveX Control RCE Vulnerability (2900986)

This host is missing a critical security update according to Microsoft Bulletin MS13-090. OpenVAS Vulnerability Test $Id: secpodms13-090.nasl 6074 2017-05-05 09:03:14Z teissa $ Microsoft Windows ActiveX Control RCE Vulnerability 2900986 Authors: Veerendra G.G Copyright: Copyright C 2013 SecPod,...

CVE-2013-6873

creationtimestamp| type| source ---|---|--- 2013-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38842...

Out-of-bounds

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remo...

IE Zero Day Patch Already in November Patch Tuesday Updates

Microsoft announced this afternoon that the zero-day vulnerability being exploited in a watering hole attack against an unnamed U.S.-based NGO website was already scheduled to be patched in a cumulative Internet Explorer update tomorrow. The zero-day was reported publicly on Friday by FireEye...

Microsoft Tagged Image File Format Heap Overflow

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a...

CVE-2013-6792

creationtimestamp| type| source ---|---|--- 2013-11-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38821...

Authentication flaw

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlsetroodkcableoj28840ybtide...

Backdoor found in Chinese Tenda Wireless Routers, allows Root access to Hackers

Last week Craig Heffner, specialized on the embedded device hacking exposed a serious backdoor in number of D-Link routers allows unauthorized backdoor access. Recently he published his another researcher, Titled 'From China, With Love', exposed that D-Link is not only the vendor who puts backdoo...

CVE-2013-3827

creationtimestamp| type| source ---|---|--- 2013-10-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38802 2021-08-26 22:56:33+00:00| seen| https://t.me/ctinow/39049 2025-07-08 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hom652w...

CVE-2013-6129

creationtimestamp| type| source ---|---|--- 2013-10-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38785 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/vbulletinupgradeadmin.rb 2025-02-06 03:13:41+00:00|...