Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2018-1273

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

CVSS 9.8 · CriticalBuzz score 60.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 60.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 22.0 · diversity 13.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
22.0
8 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
8 source links · newest first
  • WatchDog botnet targets Windows and Linux servers in cryptomining campaignSecurity Affairs

    PaloAlto Network warns of the WatchDog botnet that uses exploits to take over Windows and Linux servers and mine cryptocurrency. Security researchers at Palo Alto Networks uncovered a cryptojacking botnet, tracked as WatchDog, that is targeting Windows and Linux systems. WatchDog is one of the largest and longest-lasting Monero cryptojacking operations uncovered by security experts, […]

    newssecurityaffairs.comFeb 18, 2021, 5:10 PM
  • WatchDog: Exposing a Cryptojacking Campaign That’s Operated for Two YearsUnit42

    The WatchDog mining operation is one of the largest and longest-lasting Monero cryptojacking operations known to exist.

    vendorunit42.paloaltonetworks.comFeb 17, 2021, 2:00 PM
  • The Satan Ransomware adds new exploits to its arsenalSecurity Affairs

    A variant of the Satan ransomware recently observed includes exploits to its arsenal and targets machines leveraging additional flaws. Experts at FortiGuard Labs have discovered a new variant of the Satan ransomware that includes new exploits to its portfolio and leverages additional vulnerabilities to infect as many machines as possible. The Satan ransomware first appeared […]

    newssecurityaffairs.comMay 22, 2019, 6:36 AM
  • Satan Ransomware Expands Portfolio of ExploitsSecurityWeek

    A recently observed Satan ransomware variant has added exploits to its portfolio and is looking to compromise more machines by targeting additional vulnerabilities.

    newswww.securityweek.comMay 21, 2019, 4:03 PM
  • Modular Cryptojacking malware uses worm abilities to spreadSecurity Affairs

    Security experts at 360 Total Security have discovered a new modular cryptocurrency malware that implements worm capabilities to spread. Security experts at 360 Total Security have discovered a new modular cryptocurrency malware that implements worm capabilities by leveraging known vulnerabilities in servers running ElasticSearch, Hadoop, Redis, Spring, Weblogic, ThinkPHP, and SqlServer. The Monero cryptocurrency miner […]

    newssecurityaffairs.comMar 13, 2019, 3:16 PM
  • Elasticsearch clusters face attacks from multiple hacker groupsCSO Online

    Security researchers have recently detected an increased number of attacks against Elasticsearch clusters running older versions with known vulnerabilities. At least six different groups of attackers are searching for and exploiting insecure deployments to abuse servers. Elasticsearch is a distributed search engine platform written in Java designed for processing large data sets. It is commonly […]

    newswww.csoonline.comFeb 28, 2019, 5:35 AM
  • Multiple threat actors are targeting Elasticsearch ClustersSecurity Affairs

    Security researchers at Cisco Talos are warning of a spike in attacks on unsecured Elasticsearch clusters to drop cryptocurrency miners. Cisco Talos experts have reported a spike in the attacks thatleverage known flaws to compromise unsecured Elasticsearch clusters and use them to mine crypto-currencies. At least six different threat actors are targeting installs running older […]

    newssecurityaffairs.comFeb 27, 2019, 7:00 PM
  • Elasticsearch Clusters Under Attack From Multiple Hacking GroupsSecurityWeek

    Cisco Talos’ security researchers warn of a spike in attacks on unsecured Elasticsearch clusters, coming from six distinct actors.

    newswww.securityweek.comFeb 27, 2019, 4:01 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence