Date

Name

Category

Web

Gitpaste-12 worm botnet returns with 30+ vulnerability exploits

BotNet  Exploit

Google: Microsoft Improperly Patched Exploited Windows Vulnerability

Exploit

Millions of devices could be hacked exploiting flaws targeted by tools stolen from FireEye

Exploit

Journalists' Phones Hacked via iMessage Zero-Day Exploit

Exploit

Gitpaste-12 Worm Widens Set of Exploits in New Attacks

Exploit

Proportion of Exploited Vulnerabilities Continues to Drop

Exploit

WordPress Easy WP SMTP zero-day potentially exposes hundreds of thousands of sites to hack

Exploit

PoC Released for Unpatched Windows Vulnerability Present Since 2006

Exploit

Expert published PoC exploit code for Kerberos Bronze Bit attack

Attack  Exploit

Drupal issues emergency fix for critical bug with known exploits

Exploit

Recent Oracle WebLogic Vulnerability Exploited to Deliver DarkIRC Malware

Exploit  Virus

Multiple Botnets Exploiting Critical Oracle WebLogic Bug — PATCH NOW

Exploit

Thehackernews

Drupal Releases Out-of-Band Security Updates Due to Availability of Exploits

Exploit

cPanel 2FA bypass vulnerability can be exploited through brute force

Exploit

Google fixes more Chrome zero-days exploited in the wild

Exploit

VMware addresses flaws exploited at recent Tianfu Cup

Exploit

VMware Patches Vulnerabilities Exploited at Chinese Hacking Contest

Exploit

2 More Google Chrome Zero-Days Under Active Exploitation

Exploit

Muhstik botnet adds Oracle WebLogic and Drupal exploits

BotNet  Exploit

Cisco discloses AnyConnect VPN zero-day, exploit code available

Exploit

Bleepingcomputer

Google patches one more actively exploited Chrome zero-day

Exploit

BEC Scammers Exploit Flaw to Spoof Domains of Rackspace Customers

Exploit

Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits

Exploit

UNC1945, a sophisticated threat actor used Oracle Solaris Zero-Day exploit

Exploit

Securityaffairs

Sophisticated Threat Actor Exploited Oracle Solaris Zero-Day

Exploit

Securityweek

Attackers Exploiting WebLogic Servers via CVE-2020-14882 to install Cobalt Strike

Exploit

Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape

Exploit

Google fixes the second zero-day in Chrome in 2 weeks actively exploited

Exploit

Securityaffairs

WARNING: Google Discloses Windows Zero-Day Bug Exploited in the Wild

Exploit

Thehackernews

Google discloses actively exploited Windows zero-day (CVE-2020-17087)

Exploit

Microsoft Warns Threat Actors Continue to Exploit Zerologon Bug

Exploit

Google discloses unpatched Windows zero-day exploited in the wild

Exploit

Securityaffairs

Threat actors are actively exploiting Zerologon flaw, Microsoft warns

Exploit

Securityaffairs

PATCH NOW: CVE-2020-14882 Weblogic Actively Exploited Against Honeypots

Exploit

Hackers Can Open Doors by Exploiting Vulnerabilities in Hörmann Device

Exploit

New Google Chrome version fixes actively exploited zero-day bug

Exploit

Bleepingcomputer

Bug bounty reporter cashes out on someone else's exploit

Exploit

Bleepingcomputer

Google Patches Actively-Exploited Zero-Day Bug in Chrome Browser

Exploit

Chrome Update Patches Actively Exploited FreeType Vulnerability

Exploit

Election Systems Under Attack via Microsoft Zerologon Exploits

Exploit

Microsoft Says Iranian Hackers Exploiting Zerologon Vulnerability

Exploit

Researchers use ‘fingerprints’ to track Windows exploit developers

Exploit

Bleepingcomputer

Over 247K Exchange servers unpatched for actively exploited flaw

Exploit

Bleepingcomputer

Cisco fixes actively exploited bugs in carrier-grade routers

Exploit

Bleepingcomputer

Researchers Fingerprint Exploit Developers Who Help Several Malware Authors

Exploit  Virus

Microsoft Exchange Servers Still Open to Actively Exploited Flaw

Exploit

Cisco Patches Actively Exploited Flaws in Carrier-Grade Routers

Exploit

CISA Warns of Hackers Exploiting Zerologon Vulnerability

Exploit

Microsoft: Hackers using Zerologon exploits in attacks, patch now!

Exploit

Hackers are using Zerologon exploits in attacks in the wild

Exploit

Securityaffairs

Windows Zerologon PoC exploits allow domain takeover. Patch Now!

Exploit

Bleepingcomputer

Hijacking nearby Firefox mobile browsers via WiFi by exploiting a bug

Exploit

Securityaffairs

Windows Exploit Released For Microsoft ‘Zerologon’ Flaw

Exploit

Feds Warn Nation-State Hackers are Actively Exploiting Unpatched Microsoft Exchange, F5, VPN Bugs

Exploit

Securityaffairs

Hackers actively exploiting severe bug in over 300K WordPress sites

Exploit

Bleepingcomputer

Cisco warns of actively exploited bugs in carrier-grade routers

Exploit

Bleepingcomputer

WordPress 'File Manager' Plugin Patches Critical Zero-Day Exploited in Attacks

Exploit

Cisco Warns of Active Exploitation of Flaw in Carrier-Grade Routers

Exploit

Hackers are trying to exploit DoS flaw in Cisco IOS XR software running in carrier-grade routers

Exploit

Securityaffairs

Hackers for hire attack architecture firm via 3ds Max exploit

Exploit

Bleepingcomputer

Hackers for hire group target organizations via 3ds Max exploit

Exploit

Securityaffairs

Mercenary Cyberspies Used Autodesk 3ds Max Exploits in Attacks

Attack  Exploit

Mozilla offers rewards for Bypassing Firefox Exploit Mitigations

Exploit

Securityaffairs

Mozilla Offering Rewards for Bypassing Firefox Exploit Mitigations

Exploit

IBM AI-Powered Data Management Software Subject to Simple Exploit

Exploit

Actively exploited CVE-2020-1464 Windows Spoofing flaw was known since 2018

Exploit

Securityaffairs

‘EmoCrash’ Exploit Stoppered Emotet For 6 Months

Exploit

Actively Exploited Windows Spoofing Flaw Patched Two Years After Disclosure

Exploit  Vulnerebility

PoC exploit code for two Apache Struts 2 flaws available online

Exploit

Securityaffairs

PoC Exploit Targeting Apache Struts Surfaces on GitHub

Exploit

Internet Explorer and Windows zero-day exploits used in Operation PowerFall

Exploit

Researcher Publishes Patch Bypass for vBulletin 0-Day

Exploit

vBulletin Patches Zero-Day Exploited in Attacks

Attack  Exploit

A New vBulletin 0-Day RCE Vulnerability and Exploit Disclosed Publicly

Exploit

Exploits for vBulletin zero-day released, attacks are ongoing

Exploit

TeamViewer flaw could be exploited to crack users’ password

Exploit

Reminder: Patch Cisco ASA / FTD Devices (CVE-2020-3452). Exploitation Continues

Exploit  Vulnerebility

Public cloud environments leave numerous paths open for exploitation

Exploit

Attackers Exploiting High-Severity Network Security Flaw, Cisco Warns

Exploit  Vulnerebility

Attackers are exploiting Cisco ASA/FTD flaw in search for sensitive data

Exploit

Analyzing Metasploit ASP .NET Payloads

Exploit

DeimosC2: Open source tool to manage post-exploitation issues

Exploit

US govt confirms active exploitation of F5 BIG-IP RCE flaw

Exploit

US CISA warns of attacks exploiting CVE-2020-5902 flaw in F5 BIG-IP

Attack  Exploit

Securityaffairs

CVE-2020-3452 flaw in Cisco ASA/FTD exploited within hours after the disclosure

Exploit

Securityaffairs

Attackers exploit Twilio’s misconfigured cloud storage, inject malicious code into SDK

Exploit

PoC exploits released for SAP Recon vulnerabilities, patch now!

Exploit

Hunting for SigRed Exploitation

Exploit

PoC exploits released for F5 BIG-IP vulnerabilities, patch now!

Exploit

Bleepingcomputer

Scanning Home Internet Facing Devices to Exploit

Exploit

Authors of Purple Fox EK adds 2 Microsoft exploits

Exploit

Securityaffairs

Purple Fox Exploit Kit Targets Vulnerabilities Linked to DarkHotel Group

Exploit

BIG-IP Vulnerability Exploited to Deliver DDoS Malware

Exploit  Virus  Vulnerebility

Purple Fox EK Adds Microsoft Exploits to Arsenal

Exploit

Summary of CVE-2020-5902 F5 BIG-IP RCE Vulnerability Exploits

Exploit  Vulnerebility

Threat actors are attempting to exploit recently fixed F5 BIG-IP flaw

Exploit

Securityaffairs

Hackers Start Exploiting Recently Patched BIG-IP Vulnerability

Exploit  Vulnerebility

Magnitude exploit kit – evolution

Exploit

The zero-day exploits of Operation WizardOpium

Exploit

Bleepingcomputer

Exploit

Bleepingcomputer

Hoaxcalls Botnet Exploits Symantec Secure Web Gateways

BotNet  Exploit

Zerodium Expects iOS Exploit Prices to Drop as It Announces Surplus

Exploit

9.5.20

Exploit

Expert released PoC exploit for CVE-2020-1967 DoS flaw in OpenSSL

Exploit  Vulnerebility

PoC Exploit Released for DoS Vulnerability in OpenSSL

Exploit  Vulnerebility

Hackers Exploit Critical Flaw in Ghost Platform with Cryptojacking Attack

Cryptocurrency  Exploit

SaltStack Salt vulnerabilities actively exploited by attackers, patch ASAP

Exploit

Exploit

Bleepingcomputer

2.5.20

Exploit  Virus

2.5.20

Exploit  Vulnerebility

Bleepingcomputer

2.5.20

BotNet  Exploit

1.5.20

Criminals Quick to Exploit COVID-19 Crisis in Europe

CyberCrime  Exploit

Exploit

Phishers exploiting employees’ layoff, payroll concerns

Exploit  Phishing

BotNet  Exploit  Vulnerebility

A new Insomnia iOS exploit used to spy on China’s Uyghur minority

Exploit  iOS

Exploit

Exploit

Bleepingcomputer

Exploit

Exploit  Vulnerebility

A worrisome increase in call traffic from fraudsters exploiting the pandemic

Exploit

Net-security

Exploit  Spam

Bleepingcomputer

7 Ways Hackers and Scammers Are Exploiting Coronavirus Panic

Exploit  Spam

Actively exploited MS Exchange flaw present on 80% of exposed servers

Exploit

Mozilla Patches Two Firefox Vulnerabilities Exploited in Attacks

Exploit

Two critical Firefox vulnerabilities exploited by attackers, patch now!

Exploit  Vulnerebility

Exploit

Bleepingcomputer

Exploit

Bleepingcomputer

Firefox 74.0.1 addresses two zero-days exploited in the wild

Exploit

Hackers exploited IE and Firefox flaws in attacks on entities in China, Japan

Exploit

Firefox, IE Vulnerabilities Exploited in Attacks on China, Japan

Exploit

Exploit  Vulnerebility

COVID-19: Hackers Begin Exploiting Zoom's Overnight Success to Spread Malware

Exploit  Virus

Exploit  OS

Bleepingcomputer

Europol: Criminals Exploit Virus Crisis as Fresh Opportunity

BigBrothers  Exploit

Exploit

Bleepingcomputer

0patch releases free unofficial patches for Windows 0days exploited in the wild

Exploit

Russian Hackers Exploited Windows Flaws in Attacks on European Firms

APT  Exploit

Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks

Exploit

Unofficial Patches Released for Exploited Windows Font Processing Flaws

Exploit

Micropatches block exploitation of Windows zero-days under attack

Exploit

Spyware Delivered to iPhone Users in Hong Kong Via iOS Exploits

Apple  Exploit

Apache Tomcat Exploit Poised to Pounce, Stealing Files

Exploit

Hackers Actively Exploit 0-Day in CCTV Camera Hardware

Exploit

Zero-Day Vulnerabilities in LILIN DVRs Exploited by Several Botnets

BotNet  Exploit  Vulnerebility

Cyber crooks continue to exploit COVID-19 for their malicious schemes

Exploit

Net-security

WordPress, Apache Struts Attract the Most Bug Exploits

Exploit

Trend Micro addresses two issues exploited by hackers in the wild

Exploit

TrickBot Now Exploits Infected PCs to Launch RDP Brute Force Attacks

Attack  Exploit  Virus

Trend Micro Patches Two Vulnerabilities Exploited in the Wild

Exploit  Vulnerebility

Desktop.ini as a post-exploitation tool

Exploit

Exploit

Hackers Exploiting Recently Patched ManageEngine Desktop Central Vulnerability

Exploit

Android  Exploit

Android  Exploit

Google fixes another Chrome zero-day exploited in the wild

Exploit

Net-security

Exploit

Exploit

By exploiting an LTE vulnerability, attackers can impersonate mobile phone users

Exploit  Mobil

Exploit  Vulnerebility

Bleepingcomputer

19.2.20

Exploit

Iranian Hackers Exploiting VPN Flaws to Backdoor Organizations Worldwide

BigBrothers Exploit

Phishers impersonate WHO, exploit coronavirus-related anxiety

Exploit  Phishing

Net-security

Exploit

6.2.20

Honware: IoT honeypot for detecting zero-day exploits

Exploit  IoT

Net-security

Exploit

4.2.20

Twitter Suspends Fake Accounts for Exploiting API Vulnerability

Exploit  Social

4.2.20

Exploit  Social

3.2.20

Wuhan coronavirus exploited to deliver malware, phishing, hoaxes

Exploit

1.2.20

Exploit

Bleepingcomputer

31.1.20

80% of successful breaches are from zero-day exploits

Exploit

28.1.20

Attacks on Citrix servers increase after the release of CVE-2019-19781 exploits

Attack  Exploit

28.1.20

Trend Micro OfficeScan Flaw Apparently Exploited in Mitsubishi Electric Hack

Exploit

28.1.20

PoC Exploits Created for Recently Patched 'BlueGate' Windows Server Flaws

Exploit  Vulnerebility

26.1.20

Exploit

Bleepingcomputer

26.1.20

Exploit  Hacking  Vulnerebility

25.1.20

Exploit

Bleepingcomputer

25.1.20

Exploit  Vulnerebility

PoC Exploits Do More Good Than Harm: Threatpost Poll

Exploit

Exploit

Exploit

Microsoft to Patch Internet Explorer Vulnerability Exploited in Targeted Attacks

Exploit

Citrix ADC Exploits Update

Exploit

SANS

Exploit

Bleepingcomputer

Exploit

Attacker Installs Backdoor, Blocks Others From Exploiting Citrix ADC Vulnerability

Exploit  Vulnerebility

Exploit

Exploit

PoC Exploits Released for Cisco DCNM Vulnerabilities

Exploit  Vulnerebility

PoC Exploits Released for Crypto Vulnerability Found by NSA

Exploit

Exploit  Social

Exploits Published for Citrix ADC Vulnerability, Patches Coming Soon

Exploit

Exploits for Citrix ADC and Gateway flaw abound, attacks are ongoing

Exploit

Net-security

Citrix ADC Exploits: Overview of Observed Payloads

Exploit

SANS

Exploit

Bleepingcomputer

BotNet  Exploit

Bleepingcomputer

Exploit  Vulnerebility

Bleepingcomputer

PoC exploits for Citrix ADC and Gateway CVE-2019-19781 flaw released online

Exploit

Citrix ADC Exploits are Public and Heavily Used. Attempts to Install Backdoor

Exploit

Exploit  Vulnerebility

11.1.20

Exploit  Vulnerebility

10.1.20

Exploit Fully Breaks SHA-1, Lowers the Attack Bar

Attack  Exploit

Threatpost

Mozilla patches actively exploited Firefox zero-day

Exploit  Vulnerebility

Mozilla Patches Firefox Zero-Day Exploited in Targeted Attacks

Exploit  Vulnerebility

Android  Exploit

App Found in Google Play Exploits Recent Android Zero-Day

Android  Exploit

Pulse Secure VPN Vulnerability Exploited to Deliver Ransomware

Exploit  Ransomware  Vulnerebility