CVE-2018-8291

creationtimestamp| type| source ---|---|--- 2018-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45215...

CVE-2018-15141

creationtimestamp| type| source ---|---|--- 2018-08-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45202...

CVE-2018-15140

creationtimestamp| type| source ---|---|--- 2018-08-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45202...

CVE-2018-14417

creationtimestamp| type| source ---|---|--- 2018-07-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45097 2018-07-27 11:12:13+00:00| seen| https://t.me/VulnerabilityNews/262 2018-08-02 11:00:37+00:00| published-proof-of-concept| https://t.me/antichat/1868 2024-10-11...

New Relic: stamp2-azure-ext.newrelic.com is vulnerable to MS12-020

Hi security team member, On stamp2-azure-ext.newrelic.com, there is running Windows Server 2008, which is vulnerable to MS12-020. F322944 Step to reproduce To show exploit, the server will shut down. 1- Download the attached file with the name MS12-020.rb 2- Run the below command on terminal ruby...

CVE-2018-3020

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-0709

creationtimestamp| type| source ---|---|--- 2018-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45015...

CVE-2018-8229

creationtimestamp| type| source ---|---|--- 2018-07-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45013...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2018-13515)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

EnterToken Integer Overflow Vulnerability

EnterToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the sell function of EnterToken's smart contract implementation where "amount sellPrice" can be zero. An attacker could exploit this vulnerability to reduce the seller's assets...

CVE-2018-1000094

creationtimestamp| type| source ---|---|--- 2018-07-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44976 2018-07-19 17:25:57+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cmsmsuploadrenamerce.rb...

Unspecified vulnerability in ffmepg

ffmepg is a package that steals environment variables. A security vulnerability exists in ffmepg. An attacker can exploit the vulnerability to steal environment variables...

11xiaoli Directory Traversal Vulnerability

11xiaoli is a simple file server. A directory traversal vulnerability exists in 11xiaoli. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

CVE-2018-4230

creationtimestamp| type| source ---|---|--- 2018-06-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44847...

Critical RCE Flaw Discovered in Blockchain-Based EOS Smart Contract System

Security researchers have discovered a series of new vulnerabilities in EOS blockchain platform, one of which could allow remote hackers to take complete control over the node servers running the critical blockchain-based applications. EOS is an open source smart contract platform, known as...

CVE-2018-10751

creationtimestamp| type| source ---|---|--- 2018-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44724...

CVE-2018-0953

creationtimestamp| type| source ---|---|--- 2018-05-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44694...

CVE-2018-8134

creationtimestamp| type| source ---|---|--- 2018-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44630...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

CVE-2018-10750

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'staticGet ' function and cause memory corruption. Furthermore, it is possible to redirect t...