CVE-2023-1773-Exploit

CVE-2023-1773-Exploit...

xinhu-v2.3.2

신후 v2.3.2 CVE-2023-1773을 위한 디버깅 환경 webmain/task/api/reimplatAction.php 파일에 디버깅 매개변수를 추가하여 인코딩 전후의 데이터를 프론트엔드로 반환합니다 신후 v2.3.2 소스 코드 rainrocka/xinhu at cb732f46f8f1e4614c8cfbef47a0bcbde6ecce34 구체적인 공격 과정은 CVE-2023-1773 | Target Machines WriteUp를 참조하세요...

CVE-2026-1773

creationtimestamp| type| source ---|---|--- 2026-02-24 17:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfmngxuhpi2z 2026-03-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-03...

Linux Distros Unpatched Vulnerability : CVE-2020-1773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to...

CVE-2022-1773

The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-1773

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service...

CVE-2009-1773

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid reroute parameter to the login script, which reveals the installation path in an error message...

CVE-2025-1773

The Traveler theme for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2025-1773

creationtimestamp| type| source ---|---|--- 2025-03-15 04:45:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7663 2025-03-15 06:55:36+00:00| seen| https://t.me/cvedetector/20349 2025-03-15 08:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkfqwncqot2h...

CVE-2025-1773 Traveler <= 3.1.8 - Reflected Cross-Site Scripting

The Traveler theme for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2025-1773

CVE-2025-1773 affects the WordPress Traveler theme (

Linux Distros Unpatched Vulnerability : CVE-2011-1773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by...

CVE-2024-1773

creationtimestamp| type| source ---|---|--- 2024-03-07 20:31:56+00:00| seen| https://t.me/ctinow/202750 2024-03-07 20:31:58+00:00| seen| https://t.me/ctinow/202751...

CVE-2024-1773

CVE-2024-1773 concerns the PDF Invoices and Packing Slips For WooCommerce WordPress plugin, where PHP Object Injection can occur in all versions up to and including 1.3.7 via deserialization of untrusted input through the order_id parameter. The vulnerability authorizes authenticated attackers wi...

Amazon Linux AMI : kernel (ALAS-2023-1773)

The version of kernel installed on the remote host is prior to 4.14.318-166.529. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1773 advisory. 2024-02-01: CVE-2024-0775 was added to this advisory. A use-after-free flaw was found in nftables cross-table in th...

CVE-2023-1773

creationtimestamp| type| source ---|---|--- 2023-03-31 16:22:12+00:00| seen| https://t.me/cibsecurity/61243 2026-01-10 09:00:04+00:00| published-proof-of-concept| Telegram/kEi9aG3inm6wEBgriTJElzfBktIEkXFyp3hKxyuN5JDe4...

CVE-2023-1773

RockOA Rockoa 2.3.2 is affected by a code injection vulnerability in the Configuration File Handler, specifically the webmainConfig.php file. The underlying issue is unauthorized code execution triggered via the webmainConfig.php component, with remote exploitation possible and public disclosure ...

CVE-2022-1773

creationtimestamp| type| source ---|---|--- 2022-11-24 14:04:16+00:00| seen| https://t.me/cibsecurity/44278...

CVE-2022-1773 WP Athletics <= 1.1.7 - Reflected Cross-Site Scripting

The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-1773

The CVE-2022-1773 entry concerns the WP Athletics WordPress plugin (versions up to 1.1.7). The vulnerability arises because the plugin does not sanitize and escape a parameter before echoing it on an admin page, enabling a Reflected Cross-Site Scripting (XSS) attack. Several connected sources con...