Public vulnerability discussion

16 topics in this forum

1. dejablue DejaBlue - Multiple pre-auth RCE vulnerabilities in RDP in every version of Windows including modern Windows

   By Kevin Beaumont, August 13, 2019   

   • seven monkeys
   • vulnerability
   • (and 7 more)

     Tagged with:

     • seven monkeys
     • vulnerability
     • cve-2019-1181
     • cve-2019-1182
     • cve-2019-1222
     • cve-2019-1223
     • cve-2019-1224
     • cve-2019-1225
     • cve-2019-1226
   • 30 replies
   • 18,955 views
   • 
   • Kevin Beaumont
   • February 7

2. bluekeep BlueKeep - RDP vulnerability exploitation tracking

   By Kevin Beaumont, July 22, 2019   

   • exploit
   • cve-2019-0708
   • 28 replies
   • 7,135 views
   • 
   • Kevin Beaumont
   • February 12

3. exploit Pulse Secure SSL VPN vulnerability being exploited in wild

   By Kevin Beaumont, August 22, 2019   

   • vulnerability
   • cve-2019-11510
   • (and 1 more)

     Tagged with:

     • vulnerability
     • cve-2019-11510
     • wild
   • 15 replies
   • 12,814 views
   • 
   • Tiago Henriques
   • September 4, 2019

4. exploit Fortinet SSL VPN vulnerability from May 2019 being exploited in wild

   By Kevin Beaumont, August 22, 2019   

   • vulnerability
   • cve-2018-13379
   • 9 replies
   • 20,881 views
   • 
   • Tiago Henriques
   • September 4, 2019

5. vulnerability Notepad code execution vulnerability

   By Kevin Beaumont, August 7, 2019
   • 3 replies
   • 968 views
   • 
   • Kevin Beaumont
   • August 13, 2019

6. exploit WebMin backdoor being exploited in wild

   By Tim Corless, August 20, 2019   

   • vulnerability
   • wild
   • (and 1 more)

     Tagged with:

     • vulnerability
     • wild
     • cve-2019-15107
   • 3 replies
   • 1,504 views
   • 
   • Kevin Beaumont
   • August 23, 2019

7. php-fpm RCE Exploit

   By Daniel Cuthbert, October 23, 2019
   • 3 replies
   • 1,478 views
   • 
   • james mckinlay
   • October 25, 2019

8. CVE-2019-13720 discussion

   By Nicholas L, November 1, 2019
   • 2 replies
   • 515 views
   • 
   • Nicholas L
   • November 4, 2019

9. Microsoft install of Adobe Type Manager Library (atmfd.dll)

   By james mckinlay, March 24
   • 2 replies
   • 242 views
   • 
   • Kevin Beaumont
   • March 25

10. exploit Palo-Alto GlobalProtect VPN vulnerability

    By Kevin Beaumont, July 19, 2019   

    • rce
    • vpn
    • (and 2 more)

      Tagged with:

      • rce
      • vpn
      • global protect
      • cve-2019-1579
    • 1 reply
    • 1,319 views
    • 
    • Kevin Beaumont
    • August 27, 2019

11. CVE-2019-19781 - Citrix Gateway and ADC - remote code execution

    By Kevin Beaumont, January 27   

    • shitrix
    • citrix gateway
    • (and 3 more)

      Tagged with:

      • shitrix
      • citrix gateway
      • citrix adc
      • exploit
      • in the wild
    • 1 reply
    • 846 views
    • 
    • Nicholas L
    • January 31

12. CVE-2019-0604 SharePoint unauthenticated RCE redux

    By Robbie Wiggins, December 19, 2019
    • 1 reply
    • 778 views
    • 
    • Kevin Beaumont
    • February 12

13. recent twitter on smbghost with pre-auth RCE

    By james mckinlay, April 15   

    • cve-2020-0796
    • 1 reply
    • 267 views
    • 
    • Kevin Beaumont
    • April 15

14. Tableau XML Injection being exploited ITW?

    By RT Hatfield, September 4, 2019
    • 0 replies
    • 302 views
    • 
    • RT Hatfield
    • September 4, 2019

15. Global Payment Disclosure

    By Rami Shaath, December 22, 2019
    • 0 replies
    • 344 views
    • 
    • Rami Shaath
    • December 22, 2019

16. The cup overfloweth with Apple iOS 13 zero days

    By Tim Casey, July 2
    • 0 replies
    • 103 views
    • 
    • Tim Casey
    • July 2