Exploit / PoCcritical
Whitehole Exploit Kit in the wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-3544 | Remote Code Execution in Oracle Java SE JRE Applet Rhino Script Engine | — | 97% | KEV | — KEV |
| CVE-2012-1723 | Remote Arbitrary Code Execution in Oracle Java SE (Hotspot Component) | — | 94% | KEVRansomware | — KEV |
| CVE-2012-4681 | Remote Code Execution in Oracle Java SE Runtime Environment (JRE) | — | 99% | KEVRansomware | — KEV |
| CVE-2012-5076 | Java Sandbox Bypass in Oracle Java SE | — | 91% | KEV | — KEV |
| CVE-2013-0422 | Java Applet Permission-Restriction Flaw Enables Remote Code Execution in Oracle JRE | — | 97% | KEVRansomware | — KEV |
From the original article
2 min read at securityaffairs.com
Exploit kit, a name which has become depressingly familiar, crimaware kit that contains malicious code to exploit principal vulnerabilities in large consume product such as browsers, last news is that a new kit named Whitehole has emerged on the underground market.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.