EnterToken Integer Overflow Vulnerability

EnterToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the sell function of EnterToken's smart contract implementation where "amount sellPrice" can be zero. An attacker could exploit this vulnerability to reduce the seller's assets...

CVE-2018-1000094

creationtimestamp| type| source ---|---|--- 2018-07-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44976 2018-07-19 17:25:57+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cmsmsuploadrenamerce.rb...

Unspecified vulnerability in ffmepg

ffmepg is a package that steals environment variables. A security vulnerability exists in ffmepg. An attacker can exploit the vulnerability to steal environment variables...

11xiaoli Directory Traversal Vulnerability

11xiaoli is a simple file server. A directory traversal vulnerability exists in 11xiaoli. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

CVE-2018-4230

creationtimestamp| type| source ---|---|--- 2018-06-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44847...

Critical RCE Flaw Discovered in Blockchain-Based EOS Smart Contract System

Security researchers have discovered a series of new vulnerabilities in EOS blockchain platform, one of which could allow remote hackers to take complete control over the node servers running the critical blockchain-based applications. EOS is an open source smart contract platform, known as...

CVE-2018-10751

creationtimestamp| type| source ---|---|--- 2018-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44724...

CVE-2018-0953

creationtimestamp| type| source ---|---|--- 2018-05-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44694...

CVE-2018-8134

creationtimestamp| type| source ---|---|--- 2018-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44630...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

CVE-2018-10750

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'staticGet ' function and cause memory corruption. Furthermore, it is possible to redirect t...

CVE-2018-4139

creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44561...

CVE-2018-4206

creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44562...

Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code Execution (PoC)

Drupal 7.58 - Drupalgeddon3 Authenticated Remote Code Execution PoC This is a sample of exploit for Drupal 7 new vulnerability SA-CORE-2018-004 / CVE-2018-7602. You must be authenticated and with the power of deleting a node. Some other forms may be vulnerable : at least, all of forms that is in...

CVE-2018-0968

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44465...

CVE-2018-0975

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44458...

CVE-2018-8817

creationtimestamp| type| source ---|---|--- 2018-04-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44385...

CVE-2017-16720

creationtimestamp| type| source ---|---|--- 2018-03-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44278 2018-09-12 09:11:36+00:00| exploited| https://t.me/SecLabNews/3126...

CVE-2018-7284

creationtimestamp| type| source ---|---|--- 2018-02-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44184...

IBM Financial Transaction Manager Denial of Service Vulnerability

IBM Financial Transaction Manager FTM for ACH Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A denial of service vulnerability exists in IBM Financial Transaction Manager FTM for ACH Services...