9219 matches found
CVE-2017-4031
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2017-4025
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2017-4024
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2017-4032
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
axTLS Encoding Error Vulnerability
axTLS is a highly configurable client/server TLS Secure Transport Layer Protocol library. axTLS is an ASN.1 Abstract Syntax Markup parser. A security vulnerability exists in the ASN.1 parser in axTLS version 1.5.3. An attacker could exploit this vulnerability to cause a device to interpret the ye...
CVE-2017-1000416
axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year 1950 of UTCTime being misinterpreted as 2050...
CVE-2017-1000416
Removed by vendor...
Korea In The Crosshairs
This blog post is authored by Warren Mercer and Paul Rascagneres and with contributions from Jungsoo An. A one year review of campaigns performed by an actor with multiple campaigns mainly linked to South Korean targets. Executive Summary This article exposes the malicious activities of Group 123...
CVE-2017-2158
Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive...
CVE-2017-1000415
MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration beginning year extended delayed by 100 years...
CVE-2017-4945
VMware Workstation 14.x and 12.x and Fusion 10.x and 8.x contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstatio...
Movie Guide 2.0 - SQL Injection
Exploit Title: Movie Guide 2.0 - SQL Injection Dork: N/A Date: 15.12.2017 Vendor Homepage: http://applebitemedia.com/ Software Link: http://applebitemedia.com/amwdl/AMMovieGuide.tar.gz Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web:...
Threat Outbreak Alert RuleID31510: Email Messages Distributing Malicious Software on December 13, 2017
Medium Alert ID: 56245 First Published: 2017 December 13 18:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31510 may contain the following files: Name |...
CVE-2017-11937
creationtimestamp| type| source ---|---|--- 2017-12-08 15:22:22+00:00| seen| https://t.me/antichat/401 2017-12-08 16:20:55+00:00| seen| https://t.me/alexmakus/1515 2026-07-26 07:01:53+00:00| seen| https://t.me/KaitNews/6921 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6921 2026-07-29...
tvvenezuela.tv XSS vulnerability
Open Bug Bounty ID: OBB-446463 Description| Value ---|--- Affected Website:| tvvenezuela.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
After 27-Year Sentence, Russian Hacker Faces Another 14 Years in Prison
Roman Valerevich Seleznev, the son of a prominent Russian lawmaker who's already facing a 27-year prison sentence in the United States, has been handed another 14-year prison sentence for his role in an "organized cybercrime ring" that caused $59 Million in damages across the US. In April this...
daumier-werkverzeichnis.de XSS vulnerability
Open Bug Bounty ID: OBB-440905 Description| Value ---|--- Affected Website:| daumier-werkverzeichnis.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...