{"vulnerability": "cve-2019-11708", "sightings": [{"uuid": "7509d560-767f-42a1-bcb7-b82f2b693f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "MISP/1f9bb4d8-f2f5-40d8-bfd5-ffb4d781c91c", "content": "", "creation_timestamp": "2020-10-09T14:21:39.000000Z"}, {"uuid": "07b341e9-5cab-438a-a0d6-44edfc18c106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "0ffaa4f0-e25b-49df-a47a-ac26aca54ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971553", "content": "", "creation_timestamp": "2024-12-24T20:31:02.430456Z"}, {"uuid": "5a0f5fe2-f599-4e18-aa02-1408a926031f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:23.000000Z"}, {"uuid": "5acd71a0-4c88-4fbf-a63d-eaa82968b30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:03.000000Z"}, {"uuid": "ce1289cc-5fd1-4d37-adf1-31323f6aa176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=401", "content": "", "creation_timestamp": "2019-06-21T04:00:00.000000Z"}, {"uuid": "63135809-dc02-44d6-9b7a-166ed7f956f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-11708", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ff9f66ad-a881-44f7-a5a9-527a79e036ec", "content": "", "creation_timestamp": "2026-02-02T12:27:45.499978Z"}, {"uuid": "9a94bd33-e969-4c09-85bb-d9b55d6acb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "exploited", "source": "https://t.me/itsec_news/1735", "content": "\u200b\ud83d\udde1 \u041d\u043e\u0432\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 Cloud9 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\ud83d\udcac \u041e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Zimperium, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0433\u043e Cloud9. \u041a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u043c\u0435\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c cookie-\u0444\u0430\u0439\u043b\u044b, \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434, \u043c\u0430\u0439\u043d\u0438\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a. \u041f\u043e\u043c\u0438\u043c\u043e \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0431\u043e\u0442\u043d\u0435\u0442 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0437\u0436\u0435 \u0432\u0437\u044f\u0442\u044c \u0435\u0433\u043e \u043f\u043e\u0434 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0434\u0434\u043e\u043d \u043d\u0435 \u043d\u0430\u0439\u0442\u0438 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Chrome \u0438\u043b\u0438 Edge, \u043e\u043d \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043a\u0430\u0447\u0430\u0442\u044c Cloud9, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Adobe Flash Player.\n\n\u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0436\u0435\u0440\u0442\u0432\u0430 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435, \u043e\u043d\u043e \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JS-\u0444\u0430\u0439\u043b \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \"campaign.js\" \u043d\u0430 \u0432\u0441\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043c\u0430\u0439\u043d\u0438\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \"cthulhu.js\".\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Mozilla Firefox ( CVE-2019-11708, CVE-2019-9810 ), Internet Explorer ( CVE-2014-6332 , CVE-2016-0189 ) \u0438 Edge ( CVE-2016-7200 ), \u0447\u0442\u043e\u0431\u044b \u0441\u0431\u0435\u0436\u0430\u0442\u044c \u0438\u0437 \u201c\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u201d \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043a\u0430\u043a \u043a\u0435\u0439\u043b\u043e\u0433\u0433\u0435\u0440 \u0438 \u043a\u0430\u043d\u0430\u043b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u043c\u0443 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430, cookie-\u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c DDoS-\u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Zimperium \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Cloud9 \u0441\u0442\u043e\u0438\u0442 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Keksec (\u043e\u043d\u0430 \u0436\u0435 Kek Security, Necro \u0438 FreakOut), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u043f\u044b\u0442 \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432. \u041e\u0434\u043d\u043e \u0438\u0437 \u0435\u0435 \u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u2013 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 EnemyBot, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442 \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a.\n\n#Cloud9 #\u0411\u043e\u0442\u043d\u0435\u0442 #\u0425\u0430\u043a\u0435\u0440\u044b\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-11-11T10:05:08.000000Z"}, {"uuid": "923c886f-8bcc-4290-96e1-75b92a72a09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "published-proof-of-concept", "source": "https://t.me/ExcreamOnSecurity/325", "content": "Full chain exploit for CVE-2019-11708 & CVE-2019-9810\n\nThis is a full browser compromise exploit chain (CVE-2019-11708 & CVE-2019-9810) targeting Firefox on Windows 64-bit. It uses CVE-2019-9810 for getting code execution in both the content process as well as the parent process and CVE-2019-11708 to trick the parent process into browsing to an arbitrary URL.\n\nhttps://github.com/0vercl0k/CVE-2019-11708\n#exploit #firefox #exploitation #windows", "creation_timestamp": "2019-12-13T13:24:01.000000Z"}, {"uuid": "20d181b6-cb2d-45f2-a9da-f56304eb21b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "exploited", "source": "https://t.me/ctinow/12878", "content": "Firefox 67.0.4 Released \u2014 Mozilla Patches Second 0-Day Flaw This Week Okay, folks, it's time to update your Firefox web browser once again\u2014yes, for the second time this week.\n\nAfter patching a critical actively-exploited vulnerability in Firefox 67.0.3 earlier this week, Mozilla is now warning millions of its users about a second zero-day vulnerability that attackers have been found exploiting in the wild.\n\nThe newly patched issue (CVE-2019-11708) is a", "creation_timestamp": "2019-06-21T11:20:13.000000Z"}, {"uuid": "3c5afe9b-08e7-496f-967d-0b62f8366528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://t.me/SecLabNews/5195", "content": "\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Firefox \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2019-11708, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e (CVE-2019-11707) \u0442\u0438\u043f\u0430 type confusion (\u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445).    \n\u0412 Firefox \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f", "creation_timestamp": "2019-06-21T14:37:08.000000Z"}, {"uuid": "c5b5103c-a2f0-4261-bc4b-b9d93f8cc4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "exploited", "source": "https://t.me/SecLabNews/5603", "content": "\u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 Coinbase \u0424\u0438\u043b\u0438\u043f\u043f \u041c\u0430\u0440\u0442\u0438\u043d (Philip Martin) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e. \u0414\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2019-11707 \u0438 CVE-2019-11708) \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Firefox.    \n\u0421\u0442\u0430\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 Coinbase", "creation_timestamp": "2019-08-15T10:12:54.000000Z"}, {"uuid": "f270f7bf-f9ee-4500-aa72-e2e7d75bfbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/474", "content": "#exploit\n1. Full exploit chain (CVE-2019-11708, CVE-2019-9810) against Firefox on Windows 64-bit\nhttps://github.com/0vercl0k/CVE-2019-11708\n\n2. CVE-2019-1653:\nCisco RV320/RV325 Router Vulnerability\nhttps://github.com/ibrahimzx/CVE-2019-1653", "creation_timestamp": "2024-10-11T22:18:58.000000Z"}, {"uuid": "3502f73f-a7ce-422f-b1bd-318dc4774a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://t.me/nonamepodcast/30", "content": "Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.\n\nhttps://github.com/0vercl0k/CVE-2019-11708", "creation_timestamp": "2026-08-01T20:00:05.019884Z"}, {"uuid": "31f1a588-ff77-42a5-a12f-c39a8ca569ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "published-proof-of-concept", "source": "https://t.me/nonamepodcast/30", "content": "Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.\n\nhttps://github.com/0vercl0k/CVE-2019-11708", "creation_timestamp": "2026-08-02T00:00:20.599448Z"}, {"uuid": "e594c696-0794-4b6a-92ae-0602e5e1556b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/051ad6ea-d693-4be5-950c-c1de3ee4981c", "content": "", "creation_timestamp": "2026-06-19T12:47:15.586597Z"}, {"uuid": "edfa08f4-5266-4640-b793-c0ccee27d0f6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4ff549eb-b32b-4fa7-ba04-ddd3d77e40e3", "content": "", "creation_timestamp": "2026-06-23T14:05:22.221719Z"}, {"uuid": "0b076791-2f9b-4690-a2e8-8363a5041362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-01T20:00:59.688230Z"}, {"uuid": "159c98b9-7e21-4710-8811-0f9b69c0ab25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-02T01:01:20.425400Z"}, {"uuid": "4e841a98-3f7b-4247-90a9-b144f11f5c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-04T15:00:04.874235Z"}, {"uuid": "b1a325fa-6dca-4f42-8262-dfcedf97ff45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11708", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-05T01:00:24.940707Z"}]}