4139 matches found
CVE-2022-9648
creationtimestamp| type| source ---|---|--- 2023-09-23 00:28:36+00:00| seen| Telegram/yK-Um5pIgelPVQQzco5rC215RhA6M6d9eM9-8X6BajCtaNp...
CVE-2023-4904
creationtimestamp| type| source ---|---|--- 2023-09-13 00:23:14+00:00| seen| https://t.me/cibsecurity/70348...
CVE-2023-3867
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2sesssetup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first...
LG Simple Editor Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LG Simple Editor Remote Code Execution', 'Description' = %q This Metasploit module exploits broken access control and directory traversal...
QNAP QTS / QuTS hero Vulnerability in QTS and QuTS hero (QSA-23-59)
The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-59 advisory. An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predic...
CVE-2023-1995
Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...
QNAP QTS / QuTS hero Vulnerability in QTS and QuTS hero (QSA-23-60)
The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-60 advisory. An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local networ...
CVE-2023-38802
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...
CVE-2023-32678
creationtimestamp| type| source ---|---|--- 2023-08-26 00:14:23+00:00| seen| https://t.me/cibsecurity/69211...
D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The server program...
PT-2023-4579 · D Link · D-Link Dap-2622
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. The specific flaw exists within the CLI service, which...
LG Simple Editor Remote Code Execution
This Metasploit module exploits broken access control and directory traversal vulnerabilities in LG Simple Editor software for gaining code execution. The vulnerabilities exist in versions of LG Simple Editor prior to v3.21. By exploiting this flaw, an attacker can upload and execute a malicious...
CVE-2023-20168
creationtimestamp| type| source ---|---|--- 2023-08-23 22:12:48+00:00| seen| https://t.me/cibsecurity/69083...
CVE-2023-20230
creationtimestamp| type| source ---|---|--- 2023-08-23 22:12:43+00:00| seen| https://t.me/cibsecurity/69081...
CVE-2023-40612
creationtimestamp| type| source ---|---|--- 2023-08-23 22:12:41+00:00| seen| https://t.me/cibsecurity/69079...
CVE-2023-1409
creationtimestamp| type| source ---|---|--- 2023-08-23 20:12:52+00:00| seen| https://t.me/cibsecurity/69075...
herculesdeportevirtual.com Cross Site Scripting vulnerability OBB-3614318
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hentaimangaz.com Cross Site Scripting vulnerability OBB-3614298
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...