Public vulnerability discussion

16 topics in this forum

1. dejablue DejaBlue - Multiple pre-auth RCE vulnerabilities in RDP in every version of Windows including modern Windows

   By Kevin Beaumont, August 13, 2019   

   • seven monkeys
   • vulnerability
   • (and 7 more)

     Tagged with:

     • seven monkeys
     • vulnerability
     • cve-2019-1181
     • cve-2019-1182
     • cve-2019-1222
     • cve-2019-1223
     • cve-2019-1224
     • cve-2019-1225
     • cve-2019-1226
   • 30 replies
   • 23,772 views
   • 
   • Kevin Beaumont
   • February 7, 2020

2. bluekeep BlueKeep - RDP vulnerability exploitation tracking

   By Kevin Beaumont, July 22, 2019   

   • exploit
   • cve-2019-0708
   • 28 replies
   • 10,813 views
   • 
   • Kevin Beaumont
   • February 12, 2020

3. exploit Pulse Secure SSL VPN vulnerability being exploited in wild

   By Kevin Beaumont, August 22, 2019   

   • vulnerability
   • cve-2019-11510
   • (and 1 more)

     Tagged with:

     • vulnerability
     • cve-2019-11510
     • wild
   • 15 replies
   • 17,945 views
   • 
   • Tiago Henriques
   • September 4, 2019

4. exploit Fortinet SSL VPN vulnerability from May 2019 being exploited in wild

   By Kevin Beaumont, August 22, 2019   

   • vulnerability
   • cve-2018-13379
   • 9 replies
   • 28,409 views
   • 
   • Tiago Henriques
   • September 4, 2019

5. vulnerability Notepad code execution vulnerability

   By Kevin Beaumont, August 7, 2019
   • 3 replies
   • 1,796 views
   • 
   • Kevin Beaumont
   • August 13, 2019

6. exploit WebMin backdoor being exploited in wild

   By Tim Corless, August 20, 2019   

   • vulnerability
   • wild
   • (and 1 more)

     Tagged with:

     • vulnerability
     • wild
     • cve-2019-15107
   • 3 replies
   • 2,676 views
   • 
   • Kevin Beaumont
   • August 23, 2019

7. php-fpm RCE Exploit

   By Daniel Cuthbert, October 23, 2019
   • 3 replies
   • 4,735 views
   • 
   • james mckinlay
   • October 25, 2019

8. CVE-2019-13720 discussion

   By Nicholas L, November 1, 2019
   • 2 replies
   • 1,065 views
   • 
   • Nicholas L
   • November 4, 2019

9. Microsoft install of Adobe Type Manager Library (atmfd.dll)

   By james mckinlay, March 24, 2020
   • 2 replies
   • 1,025 views
   • 
   • Kevin Beaumont
   • March 25, 2020

10. exploit Palo-Alto GlobalProtect VPN vulnerability

    By Kevin Beaumont, July 19, 2019   

    • rce
    • vpn
    • (and 2 more)

      Tagged with:

      • rce
      • vpn
      • global protect
      • cve-2019-1579
    • 1 reply
    • 2,265 views
    • 
    • Kevin Beaumont
    • August 27, 2019

11. CVE-2019-19781 - Citrix Gateway and ADC - remote code execution

    By Kevin Beaumont, January 27, 2020   

    • shitrix
    • citrix gateway
    • (and 3 more)

      Tagged with:

      • shitrix
      • citrix gateway
      • citrix adc
      • exploit
      • in the wild
    • 1 reply
    • 2,294 views
    • 
    • Nicholas L
    • January 31, 2020

12. CVE-2019-0604 SharePoint unauthenticated RCE redux

    By Robbie Wiggins, December 19, 2019
    • 1 reply
    • 2,185 views
    • 
    • Kevin Beaumont
    • February 12, 2020

13. recent twitter on smbghost with pre-auth RCE

    By james mckinlay, April 15, 2020   

    • cve-2020-0796
    • 1 reply
    • 1,081 views
    • 
    • Kevin Beaumont
    • April 15, 2020

14. Tableau XML Injection being exploited ITW?

    By RT Hatfield, September 4, 2019
    • 0 replies
    • 760 views
    • 
    • RT Hatfield
    • September 4, 2019

15. Global Payment Disclosure

    By Rami Shaath, December 22, 2019
    • 0 replies
    • 799 views
    • 
    • Rami Shaath
    • December 22, 2019

16. The cup overfloweth with Apple iOS 13 zero days

    By Tim Casey, July 2, 2020
    • 0 replies
    • 1,158 views
    • 
    • Tim Casey
    • July 2, 2020