Vulnerabilitymedium
Tracking Moving Targets: Exploit Kits and CVEs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-0507 | Type Confusion RCE in Oracle Java SE Concurrency Component | — | 98% | KEVRansomware | — KEV |
| CVE-2013-0074 | Pointer-Validation RCE in Microsoft Silverlight (KEV-listed, EOL) | — | 79% | KEVRansomware | — KEV |
| CVE-2013-2465 | Unspecified Flaw in Oracle Java SE 2D Component Exploited in the Wild (CVE-2013-2465) | — | 99% | KEVRansomware | — KEV |
| CVE-2013-2551 | Use-After-Free RCE in Microsoft Internet Explorer | — | 74% | KEVRansomware | — KEV |
| CVE-2013-3896 | Information Disclosure in Microsoft Silverlight via Improper Pointer Validation | — | 68% | KEV | — KEV |
| CVE-2014-0497 | Integer Underflow Remote Code Execution in Adobe Flash Player | — | 100% | KEV | — KEV |
| CVE-2014-6332 | Remote Code Execution via Array Bounds Flaw in Microsoft Windows OLE Automation | — | 95% | KEV | — KEV |
From the original article
2 min read at recordedfuture.com
One year ago a notorious programmer Paunch, who coded the Blackhole exploit kit , was arrested and charged for the distribution and sale of his wares. Blackhole was an epic Russian exploit kit, rented and used by thousands for their successful campaigns against a range of targets. Since Paunch’s arrest , the exploit kit threat landscape has changed significantly as malicious actors have sought out new tool kits.
By NICK ESPINOZA · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.