12,194guides5,441members
8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos

Live data

Exploited vulnerabilities, page 35

Entries 1,701 to 1,739

1,739 in total
ProductWhat an attacker gainsConcernsSeverityAdded
ThinkPHP noneCmsCVE-2018-20062Code executionBusiness9.8
DotNetNuke (DNN)CVE-2018-18325VulnerabilityBusiness7.5
Adobe ColdFusionCVE-2018-15961File accessBusiness9.8
DotNetNuke (DNN)CVE-2018-15811VulnerabilityBusiness7.5
Tenda AC7, AC9, and AC10 RoutersCVE-2018-14558Code executionHome network9.8
Fortinet FortiOSCVE-2018-13379File accessused by ransomwareBusiness9.8
Apache StrutsCVE-2018-11776Code executionBusiness8.1
Microsoft OfficeCVE-2018-0802Memory corruptionused by ransomwareEveryone7.8
Microsoft OfficeCVE-2018-0798Memory corruptionEveryone8.8
Cisco Adaptive Security Appliance (ASA)CVE-2018-0296Denial of serviceBusiness7.5
Cisco IOS and IOS XECVE-2018-0171Code executionEveryone9.8
DotNetNuke (DNN)CVE-2017-9822Code executionused by ransomwareBusiness8.8
Apache StrutsCVE-2017-9805Code executionBusiness8.1
Progress ASP.NET AJAX and SitefinityCVE-2017-9248Cross-site scriptingBusiness9.8
Microsoft .NET FrameworkCVE-2017-8759Code executionBusiness7.8
Microsoft Internet Information Services (IIS)CVE-2017-7269Memory corruptionBusiness9.8
Symantec Messaging GatewayCVE-2017-6327Code executionBusiness8.8
Apache StrutsCVE-2017-5638Code executionused by ransomwareBusiness9.8
Roundcube WebmailCVE-2017-16651Improper access controlBusiness7.8
Microsoft OfficeCVE-2017-11882Memory corruptionused by ransomwareEveryone7.8
Microsoft OfficeCVE-2017-11774Security bypassEveryone7.8
Microsoft Office and WordPadCVE-2017-0199Code executionused by ransomwareEveryone7.8
Microsoft WindowsCVE-2017-0143Code executionused by ransomwareEveryone8.8
SAP NetWeaverCVE-2016-9563XML external entityBusiness6.5
Microsoft Win32kCVE-2016-7255Privilege escalationused by ransomwareEveryone7.8
Apache ShiroCVE-2016-4437Code executionBusiness9.8
SAP NetWeaverCVE-2016-3976File accessBusiness7.5
ImageMagickCVE-2016-3718Server-side request forgeryBusiness5.5
ImageMagickCVE-2016-3715File accessBusiness5.5
SolarWinds Virtualization ManagerCVE-2016-3643Privilege escalationBusiness7.8
Microsoft OfficeCVE-2016-3235Code executionEveryone7.8
Microsoft WindowsCVE-2016-0185Code executionEveryone7.8
Microsoft Win32kCVE-2016-0167Privilege escalationused by ransomwareEveryone7.8
Oracle WebLogic ServerCVE-2015-4852Code executionBusiness9.8
Microsoft OfficeCVE-2015-1641Memory corruptionEveryone7.8
Microsoft WindowsCVE-2014-1812Privilege escalationused by ransomwareEveryone8.8
Oracle Fusion MiddlewareCVE-2012-3152VulnerabilityBusiness9.1
Microsoft MSCOMCTL.OCXCVE-2012-0158Code executionused by ransomwareBusiness8.8
SAP NetWeaverCVE-2010-5326Code executionBusiness10.0

Source: CISA Known Exploited Vulnerabilities catalogsource updated Oct 8, 2026, 20:09 UTC

Severity (CVSS): NIST NVD

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year
All membersJoin