CVE-2019-5284

There is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier than Leland-AL00A 9.1.0.111C00E111R2P10T8. Remote attackers could trick the user into opening a malformed RTSP media stream to exploit this vulnerability. Successful exploit could cause the affected...

CVE-2019-8623

creationtimestamp| type| source ---|---|--- 2019-05-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46889...

CVE-2018-16156

creationtimestamp| type| source ---|---|--- 2019-05-17 19:46:07+00:00| seen| https://t.me/cvemitreorg/62 2021-01-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49382...

CVE-2019-11600

creationtimestamp| type| source ---|---|--- 2019-05-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46838...

SEH Buffer Overflow Vulnerability in Nsauditor Network Security Auditor

Nsauditor Network Security Auditor is a network security scanner that allows to review and monitor network computers for possible attack weaknesses. Nsauditor Network Security Auditor suffers from a SEH buffer overflow vulnerability. An attacker can exploit the vulnerability by executing arbitrar...

CVE-2019-7652

creationtimestamp| type| source ---|---|--- 2019-05-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46820...

CVE-2019-11599

creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46781 2020-05-08 18:36:05+00:00| seen| https://t.me/cibsecurity/11946 2020-05-08 18:54:15+00:00| seen| https://t.me/VulnerabilityNews/14459 2024-02-15 19:17:04+00:00| seen|...

CVE-2019-3842

creationtimestamp| type| source ---|---|--- 2019-04-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46743...

CVE-2019-0735

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46712...

CVE-2019-9813

creationtimestamp| type| source ---|---|--- 2019-03-26 12:39:33+00:00| published-proof-of-concept| https://t.me/br0wsec/83 2019-03-26 12:41:31+00:00| published-proof-of-concept| https://t.me/antichat/4165 2019-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46646 2019-04-19...

Default credentials

Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

CVE-2019-0768

creationtimestamp| type| source ---|---|--- 2019-03-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46567...

CVE-2019-5796

creationtimestamp| type| source ---|---|--- 2019-03-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46566 2019-05-23 20:48:30+00:00| seen| https://t.me/cvemitreorg/272...

Core FTP Server FTP SFTP Server v2 Build 674 - MDTM Directory Traversal

Core FTP Server FTP SFTP Server v2 Build 674 - MDTM Directory Traversal Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 MDTM Directory Traversal Google Dork: N/A Date: 3/13/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link:...

CVE-2019-2025

creationtimestamp| type| source ---|---|--- 2019-03-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46503...

CMSsite 1.0 Cross Site Request Forgery

Exploit Title: CMSsite 1.0 - Cross-Site Request Forgery Delete Admin Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: March 1, 2019 Vendor Homepage: https://github.com/VictorAlagwu/CMSsite Software Link : https://github.com/VictorAlagwu/CMSsite/archive/master.zi...

CVE-2018-20009

creationtimestamp| type| source ---|---|--- 2019-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46372...

CVE-2019-6208

creationtimestamp| type| source ---|---|--- 2019-01-28 15:10:00+00:00| seen| MISP/5c4f1a2e-1300-4391-87cf-19c50a021402 2019-01-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46296...

Cache-load gadgets exploitable with L1TF

ISSUE DESCRIPTION Previously reported vulnerabilities CVE-2017-5753 / XSA-254 Spectre V1 and CVE-2018-3646 / XSA-273 L1TF can, when combined, be leveraged to more easily gather leaked information. A Spectre v1 gadget is a speculation sequence which starts with a conditional branch, contains a...

The vulnerability of the .NET Core software platform, related to resource release errors, allows a perpetrator to cause a service failure.

The vulnerability of the ASP.NET Core software platform is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests to the .NET Core application...