Vulnerabilitymedium
Capesand is a new Exploit Kit that appeared in the threat landscape
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2419 | Memory Corruption RCE in Microsoft Internet Explorer JScript Engine | — | 53% | KEV | — KEV |
| CVE-2018-15982 | Use-After-Free in Adobe Flash Player Allows Arbitrary Code Execution | 7.8 | 90% | KEVRansomwarePoC | KEV |
| CVE-2018-4878 | Use-After-Free RCE in Adobe Flash Player before 28.0.0.161 | 7.8 | 90% | KEVRansomwarePoC ×2 | KEV |
| CVE-2018-8174 | Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine | 7.5 | 88% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-0752 | Type Confusion RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 82% | KEVRansomwarePoC | KEV |
From the original article
3 min read at securityaffairs.com
A recently discovered exploit kit dubbed Capesand is being involved in live attacks despite the fact that it’s still under development. In October 2019, researchers at TrendMicro discovered a new exploit kit dubbed Capesand that is being involved in live attacks. The tool was discovered while analyzing a malvertising campaign employing the RIG EK to deliver DarkRAT and njRAT .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.